MAL-2025-187571 Malicious code in janus-enif-tardigrade-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff78e85a54ccb460ad2b990e4270daacdfb20d0bd654fb34f0cd1caf7ff9a785 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185495 Malicious code in apex-tool-colors-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89c62893645bd2284f60d2079d955465a378a688d945047e235e72710ec44a8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189436 Malicious code in selenology-tailwindcss-cosmogenic-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8930f5ec5584cebb34ad1297b7e483e8cc42152b117d3b097a91ef8766b46289 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188628 Malicious code in perseus-metalsmith-acamar-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7188804efb1901805ec1329e87278e46d48c716067d6fe2a6a8b09e54d6c2862 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187422 Malicious code in ichnology-ursa-petrology-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a6f4fcb17fd416bbfa643799f40a797e324953f86944507dce411cb5d4eaf44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185741 Malicious code in bad-xml-simple-yaml-reject (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1084f45e2b231ed30cdbb03493b4346773bba921e81e7b020cd83f67573b669 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188420 Malicious code in omicron-query-air-cold-kappa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecf2ab953418ed4cb1f746b6fb3179574ad14d8670dc1414ab46934e8199dd06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188086 Malicious code in miranda-yildun-zooarchaeology-bionics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aeb6e52bc7a803ec59fb5ea57adb0ca8c9134ad7981072a5e09e122835a6c2e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188981 Malicious code in puppeteer-meissa-prettier-plugin-markdown-sadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 809f4be8d5b239fdc543ee29b264220777a93e8df66e578783abd5e171746ef7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187761 Malicious code in less-pavo-restart-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66a129e765e40e8dce28ab9e4ec2c9ad3d9c0771c06a7bc9dbd4186cb47a879e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188920 Malicious code in proxima-spawn-mongoose-brane (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6107ed4c94bffd5f357a8e61163bb0a8b7297755ea14dabeec5ed44bebcd0000 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185989 Malicious code in callisto-hyperion-dactyl-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94f5fbb4310291c69ae8f62db97f4ea9145c9fcda4341d9b4daa0178186b0d4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187833 Malicious code in local-ariel-elara-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baa489e4c2ddf5f4b238f4e89d02e3d3631e672743ec0775984f02753467568d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185916 Malicious code in browserify-nodemon-proxima-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f8fe0178708beab3a0e8eecf0b864a676279dca80cabc51fa9d0f1f2d2579c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186845 Malicious code in eslint-plugin-husky-pavo-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e746ee6f0fa370fc7f0fb5e7e4e47d2df2a52bc77ffee749e24d95a1f10b426 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187573 Malicious code in janus-greatfilter-cosmiconfig-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4678fcb16a0b7adb4817edb4b06bec8c2c550bf2f68a2e83f948eed4985d886a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189187 Malicious code in repository-repository-nconf-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba2212e917a4c02184ad8313ff8d6188faf06000f6bce4fcf156762a51f7d7b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190464 Malicious code in zephyr-hyperion-cypress-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83c3120a7bcc6b643e7ee8de6d0ac0d7396a197a63da497db369d04c59ebc39c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189964 Malicious code in transform-ethology-weywot-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6827172d705088dbbceab6e5d571e982778c40522594d4b1769be2151dd4821 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186666 Malicious code in earth-small-scale-simulate-static (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49fb4a6ae7bf4b0905de3d73d4d9b8c46faf60e8c2e993b8f02590be8e6893e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...