MAL-2025-187205 Malicious code in graphql-karma-cluster-mongodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ad37a1bc3bc4069bfd4867fc32ef836f405f93fe38cb337fd1e5e922bda5076 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187338 Malicious code in hercules-pyxis-rehype-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6bd5be5cc1ef899ff08e6d1c416a3327828641b760effeecae17fe1c2c25e2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186543 Malicious code in deneb-bellatrix-eridanus-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a38d8216b83ac42258c7ec4c2300616f365c570d25ae31dceb3a0406c745a241 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188285 Malicious code in nightwatch-global-subduction-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6db5dca0a960c4affb7ee077ac8b2613cfe86d64f6224a89a259c25d733fcdf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188875 Malicious code in prompts-terser-webpack-plugin-enceladus-graviton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d053da0377a86332b8a332dba7d3417176072d80fee11937868c599ab833365 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189548 Malicious code in small-route-assert-compile-interface (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 754381085149656b673543a0b5728e914427033cbf7ccd6f9b1fe0fd34b5a474 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186610 Malicious code in dorado-slidev-hyperion-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1d9b51963730a8f63d82b2a36879f53b58198545402e1f775c81363ba94df60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186384 Malicious code in cross-env-native-centaurus-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c6dce8f7485566682baf52e3ddd7d582e7a2d2645f17719277ec2beaf0b8c56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186343 Malicious code in cosmicweb-miranda-xerxes-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 689b4bd5f9f10e90e5f9194bbc308daef426c25ab1ef6f1682b3006735701711 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186078 Malicious code in chai-greatfilter-phoenix-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fef736544e30fadb402cb7b6402550b518cc7aa3e39b4f61a7c8a76ff03f5ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186279 Malicious code in config-pipe-promise-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f02106f4c3f458d8b414958c8d64a06a816b5900d86f0c97e5f3832b61b9f28c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189178 Malicious code in remark-loglevel-process-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53b2cdb762f4052d4146c3d2d35d10fe3fe6516343cf764c76cc9a051dfc4474 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189815 Malicious code in tau-float-string-reject-byte (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a0f892c15a0fe0c03ddd87d3d7e78aa84b5bf8f943daefb2a16fe2421b23957 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185776 Malicious code in bellatrix-websockets-filament-biohacking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b482c2d556ba583b556025d321187a786b8b6b58a20043a55dcfaa188e66080a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187630 Malicious code in jsonp-hydra-neuromorphic-void (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d846a84569f47fde495902906da6a1389c1da17054f67fd652782bc62b8bb6b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189299 Malicious code in runtime-stack-awk-visualize-monitor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29f5a4b7134730bc0468b4baf98a46892732f059846e6f73260ec464ed7e041f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186397 Malicious code in cryonics-neutronstar-webdriver-mocha-whitedwarf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a4b05c0c53a0d448df82872cee2b18e5bff3f2660a4e6b65d8944adf0e9fd96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186009 Malicious code in carpo-release-it-oberon-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2d9a35551f995b8ec1e04118cfd9e74e6be2edf86c3664c5404ddb401ab0918 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186639 Malicious code in draco-gacrux-carpo-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e99af30e309e14cdab037f48e58b659c2e89b47c57ea0ca10d2d97b6c7f47586 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187814 Malicious code in lint-staged-javascript-jwt-zooarchaeology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cad43193b55e96d7ea3cd1d436ee7ac5623f0f72367cc583e53d0e57d1fbc61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...