MAL-2025-186455 Malicious code in cz-conventional-changelog-ora-rehype-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d30da5642d8eb286ad5b4cb7bc7264d127f1bfcc86f5b5a6e20044ae8ebc9862 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187735 Malicious code in leda-kaus-bellatrix-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd216d897518cbb1574bf080ae095b3c7e27ead285af0c557f9c4569d578110b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186742 Malicious code in encrypt-bundle-test-deploy-scale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcaefcbdd1ffb8c51e8f0e7b02fe563dd40e979c5d81f3dc6babebe9775f54bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189366 Malicious code in saturnology-webdriver-mocha-registry-blitz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a5eee96b9423cd54ac4f62a065004d3dac4b3e73c78de4fb77e91972eef1fd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187631 Malicious code in jsonp-lacerta-eris-octans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4338b9067de467c48ebcb22a68da6ba8445e72cde9039197e552af0dcfce6e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190146 Malicious code in version-virtualreality-scorpius-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2474968d15e1ae15d7fe3d765d5e06ca8d713e82add09b6ddc4d7083cda699b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189064 Malicious code in radioastronomy-holography-express-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe0408e04bfa5629eb1d1c2f786b2fb46c5daa7568bdbfb9e16adf71967c0dd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188457 Malicious code in optimize-report-pi-module-hash (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00eeae1ab2bbeca7c4cd632577cf6916c3401c525a645b193b91425590b719a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185723 Malicious code in babel-ophiuchus-mira-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 291b6aeb47d975e9c581c055a5fc588f2982e746b1eb66b2ea5080cd10619df6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185752 Malicious code in baryon-eslint-ariel-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 061d29703953f2dc7b97effa3f9c7af300ab37b14213b9a808ac83c5a54ce6b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189921 Malicious code in thread-monitor-async-omicron-optimize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 061a9053ababe92204caba04969dab4473e5750eb9caadfb4089a4ccc4449c5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189456 Malicious code in serialize-stack-omega-node-authorize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7aed9f916c9a8d5708c398fd6560a52f8c9bf1bcfe4803b4d74ac4eb04317d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187432 Malicious code in import-benchmark-warn-node-catch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24561d64b8cda186bb2d88f82638fb3bbc75befb15a7a94728acd63a9b4ddfac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185627 Malicious code in async-psi-alpha-query-theta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7530cf46aad481c6839f10e0bee406d9caae82ffc06acdedcc54ce75442b73cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188037 Malicious code in middleware-backend-async-oortcloud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 589303641468d47dc2676783d056c226ba4f62fb3a64e597f98751537eafe25c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185441 Malicious code in alphard-halley-ophiuchus-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f06c6744631b77adfa679368aa5b79b0679290514f0027616c347fd5f572ea5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188297 Malicious code in nightwatch-supercluster-zooarchaeology-redgiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23dbe896a92e864c6d40edf151690e7a04699b5c221f7fbb1c21f727880dd0fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186113 Malicious code in changelog-multiverse-heliophysics-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d26b7c4b39b23830057045d4ac69e6039758294f45b8f6197cf5f5af279e466 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189483 Malicious code in short-shell-data-private-bash (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24b7316c8d5324f89c708b06b8523b6c7c30d7ecf843ecdba78f78b921ecb7ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187867 Malicious code in loop-wasat-chai-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9f1344329b9f15bef4ddabb5681a861f5b2482d9ea2b08719b507819b36de7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...