MAL-2025-186288 Malicious code in configstore-quark-sync-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30c3b67083ef101f23672989003756131308861e71de005811d2edde2b5f3f8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190029 Malicious code in uglify-zeta-tree-delta-runtime (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c2a9aea8eab50320c779880a7b814aebf214304d7a582738f948d6c44cf0d10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187022 Malicious code in fork-playwright-joviology-accretion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe5a06ef42fb5690b924816d514ae128fa79405a6dcdba484271ffaa84790c26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188796 Malicious code in prettier-json-publish-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3c227b49ee21c7585211e16c411530204bd43403fecd781aacd0227c4f241de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186420 Malicious code in css-minimizer-webpack-plugin-framework-nextjs-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f30f366708cef8bca649ed0d2111bba2e06d274b44d3c3ffe7f6ccc876441e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189173 Malicious code in remark-dorado-coronalmassejection-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c257d759eba4d91017038da2f152a2aa335339afacb98736807437b419377fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186080 Malicious code in chai-juno-eleventy-hydrogeology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a651f6b98ef3ec7de1e3366e3618090aba6d851129a759dc82198724df69145d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187189 Malicious code in good-bundle-scale-grid-load (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecb5f25a8c7a4ab999302de7e1d4276c98a195b7ab0c46c098583f229a388426 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187404 Malicious code in hydra-regulus-wavefunction-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6a0feec94c7f2caf416d31bfddb17c067b095aa118051f9ba4b9b3b53c348af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189235 Malicious code in rigel-helios-phoebe-fermion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24a0da6053cdb72f85fde927e0bdced3be241789ece6e8366cc94bc24e6a0aa1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189484 Malicious code in sigma-awk-abstract-error-kappa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69d501bf3234ac1bd75171ea127e1a4bda1473613eb110a0228aa8c4a668c5df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185409 Malicious code in airbnb-nconf-redis-jwt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a83a2aeb7ed757c3f88c29533b1f99f98b6f8c7bbe9e48c1143c76a979ebf1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186425 Malicious code in css-minimizer-webpack-plugin-virtualreality-ignite-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47ba110c672d536891660dda1ec49413f5e7a6c719c9586868aac72f13acdad0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187582 Malicious code in janus-repository-acamar-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c352b7dc2bdb562f75a203a60a62f9bd3e23618797491c44e1f3d6593927eae2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187698 Malicious code in koa-callback-postcss-loader-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da289d643aa3faecaf7175117c401810c7e8057d922808fb551774bc12f9d353 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188752 Malicious code in plutology-fusion-interstellarmedium-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f35960a2e783fd708a06c72b6b350050e03cc9c26a05631b4ac3c5ded4e9e70c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188824 Malicious code in private-cluster-draco-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d55b2c6488f879be03519756749da7f5fc5c54c6733164935e0c5d7f8304675a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190005 Malicious code in troposphere-elektra-supernova-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fafea2be1de7264163adeab8c2f4d88c984fdf472b377385bfec282df6b6a8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187722 Malicious code in lacerta-style-loader-mini-css-extract-plugin-less (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 222914e44e98bf610164e7ab4d3b3240a1bf355716c59e8661864f5d3de0ffc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186137 Malicious code in chi-mu-socket-cold-small (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0c962890667949b1dda36ebe56787555eacad6d8b589542c2a0f944f45c3d10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...