MAL-2025-190186 Malicious code in vortex-enceladus-slides-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 459c37c88702ede938d6aefee367e7cab529ff9cff4c09b2c9bd4ea0e63730fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187656 Malicious code in kappa-encrypt-public-rho-boolean (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 656709df41c0061ebd217bc1f9d8008060baf2008b8c7f3bdce9147727b37576 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188753 Malicious code in plutology-meteor-xerxes-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbb5bc61e9eac228156b339e33b38872ab4c63538b4ef99c2269a8dd85462dd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187705 Malicious code in kronos-ichnology-dotenv-safe-seismology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6c772d9ee172d9d8a4149b89bb7e9d6739711a4032f4fe5a817bbd35ea114c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186936 Malicious code in farout-colors-hologram-mini-css-extract-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71c99fa5451f2cc2dd0102d63f87d4f740d4e78005ef2ea86783a16a1d892269 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in epigenetics-kinetic-prompts-taphonomy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c64afb51cb674d9db30da191e7520afbe5e2a9027ba0932f5a698f2fe7425425 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in janus-robotics-optimize-css-assets-webpack-plugin-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0793378417a72050f4ae70f826a2da21befcf17f43ea0e8d0157e0268e5eedfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in load-fire-balance-try-old (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ed8bd45f714ed76dc28e104d80484f6275477e646f6d793386b90377bb12749 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in centaurus-neptune-css-loader-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0908ef85e2b7fe9360387bd155ca3c553dcb970ba235726eda56533fd71a985 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in redshift-deimos-neptune-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f964324bd6752b8565f81793c10d0ab91313d89d5665605b85485952a2a4c694 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188187 Malicious code in native-transform-nightmare-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cb8bba835dd74110960912c898ffa95ea4d8f290d3a2df21d8a9f8d597f9138 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189880 Malicious code in test-book-final-epsilon-char (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 705fa95826e8c9052b49c3e15d57712ea0539ad61c99740eb3298fc3f6319b2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190091 Malicious code in upsilon-decode-long-socket-final (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0962f6e8da2e588484b33fb5c75f660402e645c56187e064048d31ee6b4a4e7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190055 Malicious code in uninstall-semantic-ui-await-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d54cdc877af56ca1cfb7dbad3c96a744be26cd760c76bbef5ee6ca64e03bc210 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186376 Malicious code in cron-tree-query-unix-report (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f34a183643dd8952a10e6cfa7eadbc3debad2f90787679d22a85f961c815e5d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186807 Malicious code in eridanus-geochronology-element-ui-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c70e6b62e3a9f2699ecf4f192f3066aa1df8d5e90541a43a39c446e93e35fdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186726 Malicious code in emulate-tau-grep-resolve-decompress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 537111f2ce71d83f483cdf19d12bda80c8b9dbbb1a5081022d1fdbd029694e33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in koa-callback-postcss-loader-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da289d643aa3faecaf7175117c401810c7e8057d922808fb551774bc12f9d353 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meissa-markdown-iota-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbfac5256294b4858c1b93f7aa1f371d7a3507cae5cee54e35fa90d09c910e7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in supernova-equinox-singularity-robotics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67f56679cc22b11e8ed02364f4ec1180760f81d8fab695bc66756a0de7aee591 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...