MAL-2025-186541 Malicious code in dendrochronology-pm2-chromedriver-orogeny (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87475fe3d358aa6c921d2001533db20b1270f65e34ccabe2e8b3f381d6cdbcc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187242 Malicious code in grus-eslint-enif-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2665229504a76f62aadc3c746199bcddc2405c318e6b179d3c086fb8aa5b480d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190238 Malicious code in water-await-kappa-byte-minify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddac8211a085975ed1a27a1a6781daaf1224c8e6a0b1d8ab5d86e1876a0be703 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190120 Malicious code in user-analyze-uglify-minify-easy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c94d0917932065156b108cad7f2e61c6306259a6092dc4552f1a12045ad2f6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189802 Malicious code in tailwindcss-bulma-vuetify-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1dae4b6617c23b94996978d683edd81cdfa0c3dea5d59e4276843468c90769a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188325 Malicious code in nodejs-csrf-sagitta-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55b4a0d0f7ff3dd984df6f9575fd59892f7044b99a492bdad2834ae0362abd51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190443 Malicious code in yonder-xerxes-xanthus-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccc40dbe9bcc12d0ac9abb79a3fb1a96f75e26103edb32a6aaaee1c4f3592572 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187035 Malicious code in fornax-phoebe-jabbah-xo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89ab6a4c8a169e333e9defa80910133b4b619a071f3e744ce182a3d24ec5ef6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189883 Malicious code in test-janus-eslint-config-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec79023492b97711616187adb7b16741d7d4baf291a1de140a8c20060aa9f434 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185736 Malicious code in bad-key-short-sudo-resolve (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d95126115936cadcb064f8ebc6d168464fb327bc7d45149cd0e410f044d9352b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187920 Malicious code in mantle-mini-css-extract-plugin-singularitarianism-areology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0ff722dde20bc419da2c0fab62920ba320fada29e63e642f21743e99b42aab4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187006 Malicious code in fomalhaut-ora-cybernetics-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9964b1a5f5727aa60a83b521fded36b2099112209577c7f81b7be40560c99fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188919 Malicious code in proxima-shelljs-spinner-brane (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f7bd32ce89463fc87f2bf996cd96de28e6fa265c87a586e1414a63e912a88fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186068 Malicious code in centaurus-test-rollup-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6148929a592e573d8d4974b55e488857355621d8e6308aabba97db6b5521aeb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188575 Malicious code in passport-deimos-isostasy-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c50fc22d47ee88f31e9929566ac91e5175399fdb5f383bf0b9612abb971d1ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188830 Malicious code in private-toml-nightwatch-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c83662ffbbdf17c2aa4ce2a64870ae6d6728121491ccebd14659d7a55f9536b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186203 Malicious code in colors-eventhoriz-react-bootstrap-zooarchaeology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa0400d978fa965e52d12202d981d0a00f84aed877346a6ddbd17443b12575da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186471 Malicious code in dagda-non-blocking-html-webpack-plugin-astrophysics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8c96a0cb89808b6a9d97752e052ed1ed344076a7cfc56315ad0186b572be54f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190424 Malicious code in yaml-entanglement-radiant-geodynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1da11391afb2e291ea7a2a769eebd51fbbcd6def6acea5a2870be0adf561196f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187451 Malicious code in index-gamma-authorize-deploy-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 855a93e5306676df25469d50536f602165b1a8e5b59b3116fe63ffd6dba16314 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...