MAL-2025-189132 Malicious code in registry-ursa-prettier-plugin-markdown-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bce70a60b982911ae8463ded8b5a8cfc5578f573075e24291265f231dd7d8f9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in development-outercore-neptune-singularitarianism (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3a9ad1dcbf47720dfdd87f637ee8939890ae4c1b9d6ad6d72da161239249d37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relay-development-update-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d662cd5ff8760a510c47e6ce2df1e9877f2621026be7db837ea4e53fcf873d18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186448 Malicious code in cypress-geckodriver-vulcan-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a8e7b3c4e75f8542f11b8a92dfb8c43d2878628b0adecc1a5af688a49451c60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188961 Malicious code in publish-webdriverio-event-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a13ec41d982e5391f4a58b51051dc7c843a88857fae8f519de3e3ae4dcd6f643 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188514 Malicious code in paleoclimatology-nova-rollup-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02798c4c1a995a4759454c6aea2a564c68e1924207dd426345f7fed7eb2c815f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190484 Malicious code in zooarchaeology-configstore-google-darkenergy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 685650e6cfa174e861e100212f50881c079171023d9a1a82afaabbba16bc6127 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189397 Malicious code in secure-old-deploy-resolve-encode (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edd40e8463e8ef60e60e2f721f62d52e42e5b10ad7481073017d47ad4d0616fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187234 Malicious code in gridsome-enceladus-aldebaran-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ba47005bbad795aed1582ed6125855eece33c38e5df19b44c6ff5f44991e876 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-holai-inulmi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00789d98302d2d8003387a1c40cc86abe489a77fbfb7cade5372515c42f7d8fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oyib-gisnoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 605226e63b084c43a784bfc3c969698003dc3d29afa04502a921b876b9e5f06e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-tuig-alumabiza (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb5dc7072783301417022129a030e14ed1bc9940b43ff35c110aace712dcc986 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-oliutka-tabar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86ec69a80dfb84c03c5a4b2d9a9f81d697315a8ff78bf65062dec25b79bdca53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181884 Malicious code in avarag-obios-bi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c1e7f26b1e03257b0a9de39250dd26e57309b94a5669863355501c2479a48f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-tuiga-alukauabvza (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f189db9ba3d1e9766345d183095fe476443072e9ccb64528f20cef8acaa56f7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modasiv-kulvu-baufav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cd798de802d3bd6d7062038e9aa282a26d956f3ed515e49edf6de8be6170f8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kian-avumanb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf77c3b213d8dccf9ff9277aeb047c8c78be2172a6ed4cc9c73d2b624a683765 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184115 Malicious code in mlokok-lofeaki-aki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d67e223c5617163ea4709c518ba42d6b99413519a3ab0dfa100d67ef556c381 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183207 Malicious code in kisut-dfg-diwfzcfecdavgecab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40ef1b07add413255afcdb12a4d441e64fa8e8c6a5f4ea30b8e299b2d35c9131 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-diufg-d (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17d8944987f8e62b9b4d23e13855db4c380e4cd57bba6842aa7eafd2541ec6b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...