MAL-2025-190107 Malicious code in ursa-hawkingradiation-pulsar-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a44783e0629c201822fb799a347c530d77eda8b2138bb131f0087271ddeb17fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190321 Malicious code in whitedwarf-tectonic-izar-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d7eeab34171c39b6e376b91496364ea321602b2a33fdd08204eb114c4d08573 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fast-table-import-async-double (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09b7711575f733c9e98b03e3824ef5b1c29085d432948d8c4df9b454932c4f55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188083 Malicious code in miranda-postcss-blitz-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea79ab04fc3a6ac4cbf5514fff31c3ed5fba441933ff5d9a861ea695d6fed4eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188358 Malicious code in nova-sagitta-pegasus-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ba21826bf8441b5f8669b89056183151cc9cc9795e5a3f9d08c1ba1adc2ff4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190050 Malicious code in umbriel-spica-rate-limiter-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f24a2c3e8a9bab387f482012d72bbd73ca8104bd9ac31e0303a0cd6bd10374ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in adonis-prettier-stylelint-ignite-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52c2dee72f106188a0ff5e17a762bbdb0c03f1132107e86b7618d5761be4e285 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188065 Malicious code in miranda-borealis-nova-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91dfceb96c2bb4d76d95411a0920184fcb12cc9d7aa77518302845bae0a3e6a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in docusaurus-thermosphere-aquarius-rehype (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9cff65c97dcfbf5b82d994578654a3152ecc637488be528804a85e738be615d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189486 Malicious code in sigma-class-new-root-reject (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77fbeea5b52e1afb7cd1f89ed2cce35cb4dcb3522c66c0a9d069daa9a5422c99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190262 Malicious code in webdriver-manager-neptune-vulcan-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b2c9d5100cbbf9025a117af054f96d788aaf9bad8a5366d887bffe7b37c69c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190045 Malicious code in umbriel-gulp-sqlite-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a191c64e27e6c7846f4fb786da99ba6ab75ab274a4df6b2b6334a001d7cd9cbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pegasus-cache-passport-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dfec8b52297551b8c72f8706ea4a3412254e3aef5804f3ecfcd835d4237b6bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187475 Malicious code in init-enceladus-quark-terraforming (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d29ae2356859bcc4b9a2c4aaa80833cc872c02d453215111497fe3fce96496f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in byte-log-float-cold-analyze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fc6dea622dab21577f0634edd4d2fd1021f58c87893f0f7d96072fb0a69a8a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proxima-aether-quasar-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba01e98d3d6d7338f99bdfa2d64d6edd27d996c46e111d50c5c7123d434a5285 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189454 Malicious code in serialize-quick-alpha-book-resolve (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c3a965104bed503baf5938acd3d4dda26b3d1e3317487000bed52dba4bc6959 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189605 Malicious code in spectron-config-cluster-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c08d2d65c76806d436719434d7d31a3a7cc5dff6a3363f1907238d50aa0e630 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186621 Malicious code in dotenv-safe-jovian-astroinformatics-ablation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86a312ee1d39ce12596c3d43387bd9eead6fec93b1060c13fe52416868153972 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187627 Malicious code in json-protractor-nestjs-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e9e51fb2a7e3a96397a4f164c00e4a75d72efd329525fe13fc14a9c7ef50102 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...