MAL-2025-189179 Malicious code in report-easy-fast-star-grep (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08e344a2c581a34f772f67b04c94121c2f5eac9b9db0669af25db99e4c58e086 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187071 Malicious code in fusion-writable-redgiant-neptunology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c93ec88221f7e1c4c2b9ca4a7d46b67a0e7e51b80a43ce3317fba938d101de6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189569 Malicious code in socket-link-resolve-try-encrypt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d67a55af083d921f7f9ac00c877bed240fa3eaa206ab2eba52367102c6bcf86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185623 Malicious code in async-kastra-archaeoastronomy-exobiology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7e414eb0afdd76c0390d3282431a6f56f9f3e4a0fbe0d9e603e669ee3c4c905 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188222 Malicious code in neptune-lacerta-accretion-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d79e1ddb6667e6731c2582306c0b23f831c629dba94e4bc6165a1b0895384663 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186259 Malicious code in compile-gamma-wind-code-deserialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e79a53ced69059b98c4597e3127eda0bbbdafd6e162e8951361655dec32beece This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187735 Malicious code in leda-kaus-bellatrix-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd216d897518cbb1574bf080ae095b3c7e27ead285af0c557f9c4569d578110b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186661 Malicious code in dysonswarm-lacerta-unuk-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1d4ff271822892355055959d5575c07ac632f3836ddd6d8337d4c9f6915e83b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188591 Malicious code in pavo-xenon-markdownlint-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b73f8ab6723aec7e50b5b9f873fb31ab31825f1fdaa756acdefbadc5f96ca02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189840 Malicious code in technosignature-taphonomy-pino-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cb950925743b43b318dc4f6962ce166fc091c100004eeb753fc231ed2ca9452 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189752 Malicious code in supercluster-vortex-blackhole-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a840cb750914a2d75e4627c09a5d65fdf3f78ccd08344dfc9f366053fad4d11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188533 Malicious code in paleontology-luminescence-less-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e35af19331d041979605aa5f1ebb2526dca47615c002ab578283d3243b83057b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185889 Malicious code in bootstrap-fusion-loop-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ad929870f7e51b33e4727a05618a9c190591109bf47fc02313b51fdf7760115 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189921 Malicious code in thread-monitor-async-omicron-optimize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 061a9053ababe92204caba04969dab4473e5750eb9caadfb4089a4ccc4449c5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185990 Malicious code in callisto-hyperion-norma-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0fe17e81c29306f1f25e84d0a6731bf3cf77c77932e4fcd2d1cd2459925b626 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188416 Malicious code in omicron-bundle-file-final-warn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6cd56b17c0b82597e1e036cd7fb05112f6c2cf312bf53a0bcad543dfd985bc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187417 Malicious code in hyperion-sails-accretion-multiverse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 691ebea865657e2348a842ab4e8c7344a5e72132a9b13e560bc80473165480d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186250 Malicious code in commitlint-config-angular-hercules-express-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ddef34412e83c0fbe8a9644690f235972b287dd6c6f27c8589726648b3334e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187414 Malicious code in hyperion-oberon-mongodb-quantum-computing (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6bfcc2fa60e4107cbd635039755ee95dd1734cf3a96d729c4d69c5797c88a4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bash-serialize-decode-grid-sudo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f77e4d6d27883a5416570e199d67bddb626be68458845c00ac83a9c839b6da5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...