MAL-2025-188755 Malicious code in plutology-sass-loader-mongoose-extremophile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5143ce37789b72ee505bcbf926f1c3450ee28736cce04aeca84e1eb9010bbbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xo-castor-frontend-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 075c29e54a9911238abd8798bbb7fef42b22c93a5a8aa1a39d9fa0bf36cc7c7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187743 Malicious code in lepton-pyxis-aldebaran-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7ac111d3e6fc500ddc5ca2ab07f3063deb4b5b06109ccea86cde45a3ed2bf24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187480 Malicious code in init-rest-sedna-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a65abcdc90c34eea2a8e989c096887f6b814d460a37bea33ede3b1896d2ef76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188881 Malicious code in prosthetics-outercore-javascript-taphonomy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c931a82fa3afff46bc1fe441ae31982dca93b3671d9adfa8e375f3fe42ef6c9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189082 Malicious code in rate-limiter-chalk-miranda-cassini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97dbf12820a23efa6071dd559b66e1fce9c4821a398877a4c63e432d20b01f2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightwatch-javascript-kastra-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1502cb2d438c26158c0aa98f86013e06d8d4438e066e035cc159953501e1719 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189472 Malicious code in shell-process-eta-star-omicron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22452f12649538003c7b3f323d58496d4832fd6041b5b40d946747191db26d06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189091 Malicious code in react-bootstrap-nightwatch-levels-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60b4694504f4410dd51f8425128c7f0ff89ad0ced5e6287410c9132f7f235c9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elara-jovian-dorado-biogeochemistry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffc0a55b1c53c1fd2c1886e27d908c9c4f143b5f167960e36e22de36e35aeb7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185936 Malicious code in bulma-regulus-mesosphere-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 281f479ece7de40bc39ab4a96afb7d0448b253e2e0d29cb27a021bc83863c1ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185401 Malicious code in air-epsilon-zeta-key-bundle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3315bade14bc91e0c028f375cddafcc7a08630f221281feff53d52abe8355d54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189586 Malicious code in solarnebula-parcel-biohacking-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50ed3cebc11406d149f99f7b8fed1fc90bbf3c960903007d1a3ee0dc48bedae1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188184 Malicious code in native-rate-limiter-uninstall-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f38f83b9375b1dbb5616eb88f859c2dc6f2ddb8d31a21fdcdf96be69a301dd89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189555 Malicious code in soap-membrane-thermosphere-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 170ea9563c8b172d76653b10f5c52e414d07daad6ecf7e43ff3f1cb6a7feb60f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185604 Malicious code in astrometry-passport-less-filament (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c137c4ef5872efdadb22fcb81eff579f9b3d68099ea3d74d52eb029fe7d10edd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186210 Malicious code in colors-superflare-rigel-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0e903a3772257f571117e9c4c67e3181375d448e7529e39f970068e1f42f8e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189293 Malicious code in run-script-taphonomy-interstellarmedium-antimatter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51879f1dbe92808190dfdb4174790001ed7d379658ca47564fa784211fcb2319 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186423 Malicious code in css-minimizer-webpack-plugin-phoebe-biogeochemistry-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7e88aea6bc6d5bdfac3ccf178293c7fd3391a33d7bd847a88e2bed3c2f2efc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186148 Malicious code in chromedriver-hyperion-isostasy-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bba21800fecd9e38da48ea31cc273e421e261933c1367a9330955505b5dcb97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...