MAL-2025-190387 Malicious code in xerxes-nuxtjs-enif-superposition (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a3df68c1dbb342fe2e72f7fab9e48410d45a2321d9e4454632ee3c0f2b8aeda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in finally-validate-spy-transpile-scale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9042f0ca03575eae11d95191fb56e4a493c9d9cc6f78b44ff5664df90a5eae0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188005 Malicious code in metalsmith-antares-barnard-yildun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 450389a4510dcbb902b1868e1dfe320565f58b8703cf3b2c809d5d1dce57c4e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grep-fire-throw-web-sed (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebf7689d3d15f023a0d962a1dc51e8ad684feb14bbc8cc9a82f6b8716822f137 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186210 Malicious code in colors-superflare-rigel-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0e903a3772257f571117e9c4c67e3181375d448e7529e39f970068e1f42f8e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188074 Malicious code in miranda-janus-fornax-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07804782a9ba526b29707dcf95d01520ddcdbab7228282fd401eadb06ea59474 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in graviton-command-global-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 845414344cf37948a469b18b04fe8781a6a8a9e6b92f158967769b81e803f446 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189480 Malicious code in short-encrypt-root-visualize-visualize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdabb259765a3cb3fccffff07405833bdb2511ebd0f4bc5940844e0867525209 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190248 Malicious code in wavefunction-optimize-css-assets-webpack-plugin-development-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25aeb382914a3761927c689bda3eefcfcfc97e0a1a8d7b2dfbecea0ce3f3077c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186860 Malicious code in ethology-paleontology-nova-archaeoastronomy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce92a1a93eef7d8d5c677d88ca01e75f87b3503782743b8c6e058a738644aa75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186726 Malicious code in emulate-tau-grep-resolve-decompress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 537111f2ce71d83f483cdf19d12bda80c8b9dbbb1a5081022d1fdbd029694e33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in heliophysics-aurora-lint-staged-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3146d8b6e52b168ae00047b32f06d4bcb6748de549b64b41b2bfb73c6bd4abd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186193 Malicious code in code-code-old-reject-cat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c899170e707048f7a4cca5c47d5b69c5e973289a723f30a8f0ca015ae5d82005 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186264 Malicious code in compress-water-cluster-slow-cat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 562f9b245b30c1699990c7a16e89d8683682dfec4887a6054b862b4e36fb2163 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186848 Malicious code in eslint-plugin-pyxis-library-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf79a19acb73dbbede82dbfef01183fef070d4bb00c153e59937a9e5a306132d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pulsar-puppeteer-dagda-cosmology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c16f0f159690cf7dbabdfce738f01c9469df4d00633712fe2bd01c29f0b0514 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in finally-stack-error-cold-assert (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 851d0023f1b630511561a3a8277fcd85b55a566b9ea984b4ba5f4e35d51eb296 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188847 Malicious code in procyon-planckscale-steganography-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39c4d37fbf13255886e12089e56f22b61d91b3bdf0777757e8525a23c2d66b5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nodejs-hyperion-quito-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffe47afcc4eb84693e5a1585a83da52d5bc58a56d4e82fc172e560abdd48700b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185992 Malicious code in callisto-module-module-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 356ff25afa3f90e1c8c9dcc12dbc8a9ac87666afec50cb83e076db197a2abac1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...