MAL-2025-190067 Malicious code in unuk-hapi-cross-env-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d337623dc4dce49e5bb465b6ab727eee58fb69714217f60caaed1fcd72d1c14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185602 Malicious code in astrometry-halley-auriga-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0987c30c3ce3db7f1c02cef5135ac147f992aaf87e66da991eb1ef87264a23f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188875 Malicious code in prompts-terser-webpack-plugin-enceladus-graviton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d053da0377a86332b8a332dba7d3417176072d80fee11937868c599ab833365 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189709 Malicious code in subduction-exec-redis-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50aee37e6d03929cdab61b680843806f2fe81f55e49f41e75b37f927111ca3b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187431 Malicious code in import-abstract-nu-private-decrypt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector affdadf84f419615ba133e23f6466b63aa776121a9fce6149e79486c5bebc230 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187178 Malicious code in global-centauri-jabbah-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e054df192acb5a503fc2b8fab8fe9e53bbb345b829640946de23c47d0fc60e7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186713 Malicious code in element-ui-fermiparadox-carpo-orogeny (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6743a0059c55715c9eb684a714dfa0ccb855380d2eaaf67d88ce2f24837134be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188086 Malicious code in miranda-yildun-zooarchaeology-bionics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aeb6e52bc7a803ec59fb5ea57adb0ca8c9134ad7981072a5e09e122835a6c2e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187518 Malicious code in interstellarmedium-remark-procyon-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b67edcb7e03c7978ec0ee60312c057ae5dc8fdfc867993b5b2d333ba060e48e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187761 Malicious code in less-pavo-restart-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66a129e765e40e8dce28ab9e4ec2c9ad3d9c0771c06a7bc9dbd4186cb47a879e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189351 Malicious code in sass-loader-canopus-mesosphere-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfd6bbcda59d091061be1dc396ddc1689c6765b89ec42a4abe98eb51e16a4fdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190350 Malicious code in xanadu-paleontology-zooarchaeology-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d47751981dabc8838147582a7e72cfe99ce10b5f0a2f2cfbe4d271c422d667e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190045 Malicious code in umbriel-gulp-sqlite-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a191c64e27e6c7846f4fb786da99ba6ab75ab274a4df6b2b6334a001d7cd9cbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186314 Malicious code in coronalmassejection-sirius-morgan-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d80a0fc837162df43771bbbaa03d52e4c3a0b2bb5a2cc9e42a63ae33dfe82d0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190094 Malicious code in upsilon-parse-module-virtualize-sandbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37a440b3c8b3c00cc296b78fcc754858117fc974f54cf17d0173de5b6c412031 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189740 Malicious code in superagent-parallax-winston-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f860c92e471ec066342177a2645ac806c9b9b887b46c1a7f803b41e3e78a5af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186882 Malicious code in eventhoriz-perseus-semantic-ui-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36c8dfc94f09b2035ce23b897ae3ff76adb7eb115168d013c0bbd9b08398fa8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188162 Malicious code in mysql-joviology-eslint-config-exoplanetology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 643bafbeb2dfc79283955d0c21bab2fd71901ce97f885b0030161154a433103a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188175 Malicious code in native-callback-prettier-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc0dc311373b2931d044adb4e40d0af9e1e9bf640554855144ae6aba8b393488 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in optimize-proxy-alpha-cache-decompress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40d5ac7627756a64de4a29db4eee74e5ef1658bac2e231d7c74956658e3c4445 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...