MAL-2025-188867 Malicious code in promise-yonder-lint-pyxis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bcc683c63ed5e1e96a3f977f18154776f0344713ec0769fcb379dede9262bea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189007 Malicious code in quantum-sirius-spinner-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c009730042d0c36541d7a9147c37bc383153c82e0dff8575f0337d20d263c0f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188067 Malicious code in miranda-despina-sqlite-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 878e603c295849975d59f748701398821459653943002d7433907fc9b3f73aad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186797 Malicious code in equinox-kastra-pulsar-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14e7bb6aee60dd97332f2cbbd9c110f17a7cf40c2cf296da8e53fdb919edfdfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188613 Malicious code in permission-index-zero-visualize-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef95024f895fbc9dd8bd4d4a7180084f57208d75170afa7adc3e52403b32a029 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189454 Malicious code in serialize-quick-alpha-book-resolve (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c3a965104bed503baf5938acd3d4dda26b3d1e3317487000bed52dba4bc6959 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189135 Malicious code in regulus-nova-resolvers-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b92e9b55e91662d691c1bb85ba291aed8b091512b2005652721926e607e4363 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189109 Malicious code in redis-epimetheus-jabbah-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6772a2748dfd8052df353660cdf46ee191aee541abb93639ff7612b651bddb89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188676 Malicious code in phoebe-sagitta-cosmiconfig-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef0e13ea76237699131190626c9abb30663026fbd8636c42b98e42d5707324a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189896 Malicious code in testcafe-jsonp-lyra-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 304cb8c0a4bc6028d7409abd3438dd2e2e32758c808c2e52ddc9c45829b586ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185731 Malicious code in bad-eta-encrypt-error-signal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1430a541231c581ecaecf6111ee0646d539ec2f560fe6401ba786567cbe1eef2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185935 Malicious code in bulma-rate-limiter-nodemon-aurora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 009a5f663c52773985c30c7de3050020ede21883b42f36c0dd75d76534b9b859 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186702 Malicious code in electron-nconf-callisto-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc90748ea64a281a778df79da5f5d78d8439ba2ac5dd54761b15734e56d7aac7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190192 Malicious code in vuepress-parallax-socketio-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58bc0674a620983ea2af74aa10753189e4138f07b84db82b35cc3e0fc56b5611 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188962 Malicious code in publish-xanthus-cypress-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cddde1a52ce767fadb05cbd31671938c574d95abb54b2c3e13d2a133ea934da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189285 Malicious code in route-compile-good-private-tree (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4656944013166c647172585699e90a5fa13386025f1b2465f79a8fe3483315bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185884 Malicious code in bootes-reveal-md-cache-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cb7748dc176d64edfdfb72e752149d9195e91e117f7347bc52da30c4b3bf009 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186473 Malicious code in dagda-polaris-entanglement-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5325a6a4cc8abbb32dc79710052d24b808fd1692e4b2370bfa9cf74f61373dc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189017 Malicious code in quark-dorado-ethology-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9270626698c8706953e8ddc2fe61d99577497576cc954a81c95ae6ad4a0c625 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185813 Malicious code in biohacking-axios-pegasus-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4efdccd5f20956e76e5cbd07eec5aa70ae4c11ead7e25a8d925cd659fd5b4975 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...