MAL-2025-188333 Malicious code in nodemon-heka-wezen-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c295e465036b78eff0cd11ff9a8e7e1894c08d139ec57d8043ea93e45a02fdfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190258 Malicious code in webdriver-manager-bulma-pino-pretty-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94e2d2e422a2dfc3074f2db8f722b8a7a83c1486e51d381137823f71ec4a9515 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188450 Malicious code in optimize-css-assets-webpack-plugin-polaris-docusaurus-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c44a99fabb4e0d5735d6d5ed781d797b9a5c415bb82cacef81f2cc52473301c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189432 Malicious code in selenium-neptunology-nucleosynthesis-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08b5ce15902953e8f3b5533e6afd805d051c541901105d6bd4e8719cbb072f37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189273 Malicious code in rollup-plugin-loglevel-archaeoastronomy-on (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ae1d18ecda3a4a15013d21d522f0598cfc55b2f622436d4550842dd4870a5d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187879 Malicious code in luna-mira-eslint-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b68370c7fb19d1cf0730a09b2a14c5c2b57ee9fa7cb0c3a9a10b30feb22bc4b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188556 Malicious code in parcel-farout-webdriver-manager-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0323de8abc57e066c52e4d4f9edbf96b4ea12374385abf4cf5c1c36196afff25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188663 Malicious code in phi-secure-deploy-air-finally (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbc13f51e75a048ac88b7a6957de8320f60bd9b1e5993580feb537cf2c5e7abb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in await-husky-electron-builder-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a86a1bbe4cecbcb8f3590b941a42cef3a87592003a2e822f176e34decbd8f04a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in areology-express-kuiperbelt-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 819117857c155692c2a0d41639c5739a13f2e44777fa96cca650d2b82880800a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190002 Malicious code in triton-subduction-darkenergy-boson (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ded23c9e0124c562aa6da9484bbf4806d7866cad1d4d49fc62d109bf56d9f83d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188689 Malicious code in photon-sqlite-package-archaeoastronomy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7150a4433d6efb75ad9b3eccd02dca44b0b9102a6d9f95e0b94c56084c9e6b15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190103 Malicious code in ursa-auth0-delphinus-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a3d75c84533df7d7cbc4e6990cd81f583a0ee3f1095671e9cad2c2b7ff44e9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in barnard-soap-gravitationalwave-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99fb6bb311abe39715f83590bf71d33b3e1f29c30ebcd134a8d514362a9b9313 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189470 Malicious code in shell-integer-optimize-log-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45f7c1a43e5ae21f36403f8a689d673dbee083c6f11ecc57ca2355613d69ecbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187071 Malicious code in fusion-writable-redgiant-neptunology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c93ec88221f7e1c4c2b9ca4a7d46b67a0e7e51b80a43ce3317fba938d101de6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188562 Malicious code in parse-abstract-beta-rain-benchmark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e128fa56bacf336a1f2c8600398d70f2ab99bf6fb61db89b40ca95d960d06ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189465 Malicious code in server-publish-ultra-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80a79a38e0a196ea73bb64460ddb5a414d0daca9ff3b5f70eb45ce4fc3959871 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189332 Malicious code in sails-rollup-unuk-xo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b33fd2b89cf4ed018cf7deea569ccd3b18d23b7b1f0990df18111c52130666ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in package-process-helios-markdown-pdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aeb81f40d3ff44ee4699781197daf1ed03b36c2de1caae9749443281acd3d14b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...