MAL-2025-188263 Malicious code in nextjs-google-transport-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c44eb151cbcb09b201958c6f74871e720931d3f659375891dfd01e8250ce544 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185889 Malicious code in bootstrap-fusion-loop-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ad929870f7e51b33e4727a05618a9c190591109bf47fc02313b51fdf7760115 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189482 Malicious code in short-public-permission-grid-throw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99cebd8516a3b996a17b13a2a6d99d754157b97ff1c4d86de13c01ebfafb4356 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188748 Malicious code in plutology-alphard-achernar-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61ded5371ce063b72e4c9cc847308fb09fe72a73590cb02d665c094241045f41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187177 Malicious code in global-cassini-hexo-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5e8261faea100870ddc8b1d2bc37fc01e95b83d8331ba91092d10e31091009d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186759 Malicious code in entanglement-jasmine-seismology-nucleosynthesis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6c9ccd83a96385818a27d8b5a66cfe8783c5d31de6b3b174068672cb1c3b5cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185620 Malicious code in async-gridsome-xanadu-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a279895093e63b7653ef1defaee79c1cb92b45475d3a6c650d3ca4ed7a056fc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185786 Malicious code in betelgeuse-antd-magellan-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bba981ed499b399f9a3ec1b2f5c6d1ffc81ce85026281fc7b86016b3732bd086 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188006 Malicious code in metalsmith-eslint-plugin-proxima-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a089256b968987b9ce2f7f33576c538fe8a9fb310484093972dafcc4d21ec29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188920 Malicious code in proxima-spawn-mongoose-brane (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6107ed4c94bffd5f357a8e61163bb0a8b7297755ea14dabeec5ed44bebcd0000 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190265 Malicious code in webdriver-manager-sociobiology-wezen-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f48d3c0fd20375f6fc9ae730c7410d98f76bba902c31d24ab749f3bd628ff98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189984 Malicious code in transport-command-tachyon-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0edf236c6cd49684316b7dc0c0aa1202a6536332e740642610fe27705c86625 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189792 Malicious code in table-link-chi-grid-byte (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 981463794049a950f7aa4edd8fa557b85d449b3de90abcf4aefd078e49d513b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186259 Malicious code in compile-gamma-wind-code-deserialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e79a53ced69059b98c4597e3127eda0bbbdafd6e162e8951361655dec32beece This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185496 Malicious code in apollo-aldebaran-miranda-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6d1896c35173f726b4ec506881e4897c4a13138416fcefbb01ece9e47041a06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188731 Malicious code in planckscale-ora-envconfig-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb106b457d5f917ba8c7114dbb5f21f91e8bfd4bc12332d92ae52143d6d392e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185487 Malicious code in apex-aurora-xml-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd7d0a68560ea990b728310621a54435d29f21a74d08f8126b4956b41fc0234e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185826 Malicious code in biomimicry-kuiperbelt-castor-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cad2bcd54635313a28e29d24a2fc5ecca38fe189b939fa57f7af1e460466698d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186102 Malicious code in chalk-resonance-triton-mineralogy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bf63178531eb1e18ec7be76ee8d7757e6690fecc2d546232fa954284ad7bee6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185946 Malicious code in bunyan-jasmine-winston-geoarchaeology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fa105000e7cc509705628856a64c489581c50221c6ae02d7ad46d875a191553 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...