MAL-2025-186460 Malicious code in dactyl-loopback-axios-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94ef9b4077e3c6ce19e631255d57d1edaaaa35e2479ccaad486e1d3e0d6f9a3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187547 Malicious code in iota-stub-wind-quick-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 926d033f3f79f78ed2711cf99d51fef9eae637b5fe355e222fd485b6b583a03d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190399 Malicious code in xml-proxima-rest-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a1102d2c7aae26b1696c4937b33f1603f7e0cb43277d6af00d48ae46b44ba92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187114 Malicious code in ganymede-tethys-jwt-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 404215b9a56b2a2fb508a19ae3dd7a8e028cd7ee171394ea28d87123eb72e07b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189809 Malicious code in tardigrade-indus-baryon-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75f2514afda20ff1f907f552513fb989fb4e0bcb04cdc483a5a11c2b968e60bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188249 Malicious code in neutronstar-gravity-aether-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f972bd2bdf22287e5777a5a623ae50acb15807c5fdafe094d797fd69123e914b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190347 Malicious code in writable-lint-helmet-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d5a4b6d4af71eeb4c819c5aeed09820f02c8309f1b35be0b403965813dd281d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187618 Malicious code in joviology-mocha-cluster-redshift (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e9dd0d817cec48ab80cd4d1714aadf14d4ff65a48878f2666584abdcefedaf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189746 Malicious code in supercluster-command-betelgeuse-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75c4312f9a8f4944f7302c2d84d8f462d661b5c52a2451094345926045d0e847 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189075 Malicious code in rain-final-bash-bad-resolve (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b36f7861b2c5a32da3cbd2d0cb30c946b3f8a373dcf16159ed8af05069eb8dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187527 Malicious code in ionosphere-tachyon-arcturus-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20628fd90048c494290368be2a2d5136b8700e783d74d0b8e85b978626aa1e89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188968 Malicious code in pulsar-dotenv-safe-redis-fermiparadox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9c008e0e78c252ad80dc2cdf02ef146655bf01aa8cc20e278fc2892651e7ded This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185417 Malicious code in aldebaran-markdownlint-phoebe-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d2eae2d4d24b716dcf27519ab4ec2afb1dff648a431341b81fc253327556c6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190349 Malicious code in xanadu-ganymede-thuban-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee9f8b8c8bd97eb72abbfb618a0776afb1768b178f6a5f06ba703621965be9f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189210 Malicious code in rest-auriga-bellatrix-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b86da353d85dffaff66eee00db788ffbba664110467cbb9f4b56baabf574c9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189597 Malicious code in spawn-nova-antares-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9165a42167bfaa2160397587a1d764f3ba2df9f596d3d7bad89d935d99800188 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187781 Malicious code in library-nebula-rest-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79ba74e4d265a0cd7cf0b173712f28c7ddd0af4de4fa9cd301c0208b5d3e55be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189041 Malicious code in query-relay-tethys-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af189cd49609d81bc49a9a98f3374b67f49d0ca9a23076795f45d4ac631782e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187847 Malicious code in log-slow-debug-zero-report (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78fd3a990df8eb8d56e45ec770b108e1834d4459466ee6772f3bce67e6c803c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186552 Malicious code in deneb-terser-webpack-plugin-lightyear-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a910f12a93912cafcd341ae149ac82c7f49fcb236b79a4164a070f32aa8ef5df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...