MAL-2025-187057 Malicious code in function-finally-beta-fast-deploy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 277c2567a05d73248efd5212ab88022580b3ef9176c3513534c105c50a8feb43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187458 Malicious code in indus-farout-carpo-astrobiology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0038536bac5c13bd53dec8468ebaaef7cd5e4305c525901b01db203f61007e73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188215 Malicious code in neptune-dactyl-pulsar-paleoanthropology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2123715c56eaedbeaa672d219a006c5fcd02737e10b7110ab4b05abb9c3f5e71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187091 Malicious code in gamma-good-socket-enum-route (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31fb8ce741f087b55ea1186167a688e06a6393fa56520189107a29c13cca94fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189802 Malicious code in tailwindcss-bulma-vuetify-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1dae4b6617c23b94996978d683edd81cdfa0c3dea5d59e4276843468c90769a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185723 Malicious code in babel-ophiuchus-mira-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 291b6aeb47d975e9c581c055a5fc588f2982e746b1eb66b2ea5080cd10619df6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186194 Malicious code in code-interpret-finally-decode-cold (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bda77329400e2d6d937de5ec4642461363583de5cc3bc09ba36c5270ced52d51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186367 Malicious code in cressida-cybernetics-rollup-plugin-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae7b624253f4701adc0d6788e133d422ccba7de259ae6dc18a12697f8594e8e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187167 Malicious code in geomorphology-astrochemistry-alphard-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 206b849dc5689a7e5c43f5c73d619dc09d9bd8248ad29e5e4a9c7beb15c96102 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190240 Malicious code in water-catch-cloud-upsilon-java (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ee923d12f25e195265318063f9ca7aefda531762b20e5da248f7248ff39084f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186666 Malicious code in earth-small-scale-simulate-static (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49fb4a6ae7bf4b0905de3d73d4d9b8c46faf60e8c2e993b8f02590be8e6893e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189047 Malicious code in quick-validate-transpile-cluster-route (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fee10f0bcabc32d9ac66632a283a2ba700f31cfdfd2a8f280a980368720bf754 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189135 Malicious code in regulus-nova-resolvers-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b92e9b55e91662d691c1bb85ba291aed8b091512b2005652721926e607e4363 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186908 Malicious code in exoplanet-xerxes-interstellarmedium-octans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56f6b83f3bf5aa13c5c240a68822042cd334b7ab9ca7607f5c0562f4b8966fa8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185736 Malicious code in bad-key-short-sudo-resolve (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d95126115936cadcb064f8ebc6d168464fb327bc7d45149cd0e410f044d9352b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188642 Malicious code in perturbation-nextjs-singularity-gravitationalwave (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b165730c41881b44c233e780d2b9bde16b2fa49b0f012d8c28a06092c15347d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188920 Malicious code in proxima-spawn-mongoose-brane (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6107ed4c94bffd5f357a8e61163bb0a8b7297755ea14dabeec5ed44bebcd0000 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190273 Malicious code in webdriver-mocha-isostasy-arcturus-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d2f393ecb95e8e9f5f3425763254c5601275e09c6da401d019ce63fa0756169 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188458 Malicious code in optimize-theta-process-cluster-dog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb2b3e9d3328a363fb5b4710efab7a9851461ed3577869eae397a170f5d2476d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189710 Malicious code in subduction-middleware-javascript-supernova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7115b54f7e57043e98fb77619781e6bf25031e1d32deee60dd41e1798635fdb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...