MAL-2025-190068 Malicious code in unuk-loop-mdx-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 295429884cb23c05cd22de2b6bb4cfe7d99359296b20883aa2aabebf7b820b72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188268 Malicious code in nextjs-sagitta-backend-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d30433018a5273b06b2934b8e3c126a9eacec0a1c317401dac6dd8848fadecd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187779 Malicious code in library-frontend-update-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed2e4f376bb17f8ffc87980fa0da0d846405540d49493c4df426758297bec270 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187800 Malicious code in link-upsilon-link-kappa-compress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3067d1508451f6789510b62511e905e3046d9763f2244761c52bc46576b6b073 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185778 Malicious code in benchmark-view-mu-cat-virtualize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fc47cd19dd87e3112e036bad1f9a2d225fe3502c682b923334313c3239d36e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186658 Malicious code in dysonswarm-apex-graphql-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00edc1420ef60c8781c29b4cfa9b3d8d0e4928fb48176c0fabe627e881d70830 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188035 Malicious code in middleware-antares-bootstrap-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8413a05fb60698d2bc5a2570951f668c8b724e92016b863ae04b7b1ee7906617 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187228 Malicious code in grep-emulate-module-assert-chi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c75466ab2e6d7a0911b9994ce70e2bfe94d442f610e416ddf1214d0dbe6ead6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176673

Malicious code in resolvers-semantic-ui-cosmochemistry-andromeda npm...

MAL-2025-185920 Malicious code in buffer-apex-paleontology-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7934a4535374d05d16ea53b38d74dffb1e309e10a8580c835e0cef8416cd0341 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190249 Malicious code in wavefunction-parallax-jovian-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 938e05e40ad6861d8df01b57009bd79edb9c666be6fa41d3d26d00852d06cb71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190217 Malicious code in warn-spy-grep-compress-load (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7adbd14c509a4b5f131c01428c8968f456dca5cbe03c08c476765d17541eb71d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188447 Malicious code in ophiuchus-yonder-magellan-remark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c09c161d13a9317bce131ea8b042245be5a5099a41b500fb7888eaf18d11e708 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186760 Malicious code in entanglement-levels-leda-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e292447f2134db338338d63f8b2a16b4bc83686c388f6b6c05cd2d77c971844 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189334 Malicious code in sails-winston-radioastronomy-charon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cba6305df4d60ccf768e7bee2c868494cc894ecca3c96bd0b67d8009bd1a94cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188876 Malicious code in prompts-xanthus-blitz-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5254336ae396f90fdca8d9a98e3c45ded6be01d1e812733bf65f8d8a93c58b39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185904 Malicious code in boson-module-subscription-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b125db232d506bacfed4f1c5a620f3576c9251eeb7e82fe2ab4fc0f609df2ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185631 Malicious code in async-virtualize-private-link-view (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf4adc0e9d1ff505b8a506865352273ba4c53552e07dfa1f7c2194dc608ad2dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187474 Malicious code in init-charon-terser-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3508eca342f082f4e63f5a94b88316894ac60ba0b8e0ac588455e64488807bcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189361 Malicious code in saturnology-enceladus-jest-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c71ddba711570c0f93b560b77dc589e118eafa0301b4b1d647ba6cc1e251c4a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...