MAL-2025-190312 Malicious code in wezen-hexo-update-lithosphere (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29b835942f6a8543c810550c04c687136135ae9e3c47b61eb95bd234b7c13caa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188120 Malicious code in moon-old-gamma-deploy-cloud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b5c4869ddd3ada1d30aaaa35c240e8d99748ce6917156ee14dd323fe2ec849a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188156 Malicious code in mutation-promise-xenon-fermion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 554d723842b52f3bee2363cd06fd5b08d3a99aa9b45c5ec018bee13a5dca8525 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188710 Malicious code in pino-pretty-yildun-express-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 269ed87702f42dc45182c4c396bd4001c18e108c66d5f61fd4f3ac96adeee437 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186650 Malicious code in duplex-tailwindcss-nestjs-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cb446b2c191323971e7ba7bde19ddb20f59f29b7a2b7e053f8d6473d29796b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188283 Malicious code in nightwatch-event-gammarayburst-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8618a6ac2d8d8be1023291acfd62ee0c8a82f6f62a31e2f78f2df4bce163aae1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189056 Malicious code in radiant-express-terser-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13f9521da351568b57666d90d27cd93da483825173809d96571f3dd28e990f35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190030 Malicious code in ultra-html-webpack-plugin-zenith-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 854f44ca4df072d11c0a459bc99fb7561906493f41e538370f65715dcc2c9d5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188357 Malicious code in nova-relay-cosmogenic-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56dbaefb01969fdf64e8ec7433f6d512ba321800652f1879c013d3f2c5099635 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187211 Malicious code in graviton-hapi-less-loader-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bb8fb65ea2c82a7ebd036fb556fb70c2c9cb967106c4ea3b82b1936b540d8b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189468 Malicious code in shell-class-encrypt-info-zeta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e40f5a80a4c02a821298a0f6020758be052096be3e880026d550837ed3e387d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190105 Malicious code in ursa-eslint-config-draco-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e217945f165a1f3c90399d422a9537e095a863757767e01869c147571bd5687e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187967 Malicious code in meissa-ethology-centauri-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e6774ffcd11a4066195a9f84a607d2f890cf53790c5453023adadb6b0b46724 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185438 Malicious code in alphard-dynamo-antares-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 548e58df085b49fb6b9511df3b11a9697aff3fa1dfec19601ea92bc5f247f34a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186467 Malicious code in dagda-ablation-ganymede-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a403cd335f4f51180f5005355c2b51c318cce6d0910807f0b962298e25ee8ac4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190107 Malicious code in ursa-hawkingradiation-pulsar-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a44783e0629c201822fb799a347c530d77eda8b2138bb131f0087271ddeb17fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186215 Malicious code in comet-exoplanet-oortcloud-cosmicsilence (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faf8c869d5df3a8732422a1ff8ad9840450bf2adfff295a63d5c3b3137731722 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188212 Malicious code in neptune-barnard-mdx-less-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab7c0e0acd449d91091dc3badd8761736dd2387ceacb715698941f9b53f6e56b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190151 Malicious code in view-visualize-nu-shell-small (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e87b26929fbb1f75d8efa9ab61151f6081a056a832e1c145064abd8cb24e66e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186905 Malicious code in exoplanet-scripts-webpack-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30bdc2b9b37921b1329658051abffcd6a5a4c3353ffdf67338e72ac4d419e113 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...