MAL-2025-189743 Malicious code in superagent-singularity-singularitarianism-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cbdaa1d54bbc61f1ea74857628bad1ed29b040508630d98c1a955535b5c8217 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189213 Malicious code in rest-nova-nightwatch-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 667df92958e84b0615d81c3cbb178f8c117b019ca8357f70aa7c4c9d742be2b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185798 Malicious code in betelgeuse-sadr-antd-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5533bbb97535e19e922a0da680df8685d27a569ab72e0b79de9398e24a13a406 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189238 Malicious code in rigel-miranda-cache-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f24d18ebd38c79524545d193434c68697eb21e47a21abb2e7f108ae969d00566 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186524 Malicious code in delphinus-framework-miranda-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a5b0d8a450baae1d7aebb7e8c503e1c07b94b3b3045f053bec0e0145f5d1165 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190302 Malicious code in weywot-phoenix-betelgeuse-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e4bc442d8873cd68c56fe61c66df8a408f502757c0c8ddb89374f722f785995 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185618 Malicious code in async-eta-try-balance-java (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d16ce88a7db07011ebd02f6deb6abe9ec27e30f28d503c3580ab35c829a94c70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190385 Malicious code in xerxes-koa-promise-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f7f2f61998e11d01a86b314c656f657f5b480c9796ae6910da2c471584dfafc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185728 Malicious code in backend-nashira-rate-limiter-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e28d41418e73455f50fdea86c16dd0c3ae6618565892df8f8aa3497811e2fb9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189435 Malicious code in selenology-dione-envconfig-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58446230808fb30c9c6d9ddd433a5054ef4d641b42fc35972fa47ede2fec4431 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186042 Malicious code in celeste-baryon-stop-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 846401c80326a995821fe08966683abd9e419a6930435b3f12e358b285781155 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185400 Malicious code in air-easy-dog-float-interface (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5383247b85e0c729c376c538e98461587e02a8093897571bde55b8c251dcdfe9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186174 Malicious code in cloud-star-parse-fork-sandbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8952f1c640e356dec0fbec116b2f433817d877347505c728b5161b584a49ef99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185551 Malicious code in arcturus-venus-loop-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96ed06828532b121a84a1185a79336c108250ef8e69551667cb9ac3227c6fab1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190152 Malicious code in view-warn-bash-rain-old (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5b4c467de8a271769bc1a336e123725feaf0bea5e2e1785990ba6cc65d96953 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186127 Malicious code in chariklo-dysonswarm-yildun-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa477cd6897766c398cd57a2aea2b1d6fd733eff39b5ff57980aab03eac32282 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190458 Malicious code in zenobia-zephyr-dactyl-planetology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b41972a45f6193c0e871bc179bdd7dab9cdffb8574219b66bed2cd9c14afd2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190102 Malicious code in uranology-version-flare-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7590dbda8cfb7c763afc803e54f5eb4d59a9c4a1274d0a54bfd219c15fdcc6f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188752 Malicious code in plutology-fusion-interstellarmedium-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f35960a2e783fd708a06c72b6b350050e03cc9c26a05631b4ac3c5ded4e9e70c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187824 Malicious code in lithosphere-markdown-pdf-winston-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc6fbfe227af2797cf89ea184596ed69bc80870c57f08a1e421accae594ddd57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...