MAL-2025-189662 Malicious code in static-stub-dog-epsilon-final (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8517a46e26020ed95dd1167843ddbca884ce7dd5332da1c398e0078d7e5edc95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188923 Malicious code in proxy-cache-beta-iota-water (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62ea476eadee6f737a5d5939604779845fb47a080e38fec660f39ad6b1e818e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188676 Malicious code in phoebe-sagitta-cosmiconfig-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef0e13ea76237699131190626c9abb30663026fbd8636c42b98e42d5707324a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185993 Malicious code in callisto-proxima-command-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cad0a7c61c821a3f3b7a8f908f59e257f6b79a1afbb456f7f9a8da57a2b150a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189537 Malicious code in slidev-parallax-epimetheus-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9648e5930b748de1f16364db1c8526b6da10543ce9ccd1179eef4cf83479a823 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186760 Malicious code in entanglement-levels-leda-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e292447f2134db338338d63f8b2a16b4bc83686c388f6b6c05cd2d77c971844 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188556 Malicious code in parcel-farout-webdriver-manager-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0323de8abc57e066c52e4d4f9edbf96b4ea12374385abf4cf5c1c36196afff25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188486 Malicious code in oscillation-readable-supernova-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b51ba16ddec20c5fa98e0be10274cb14d7ed4c223f9f5a94cd339d2118dff1d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185444 Malicious code in alphard-supercluster-exobiology-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caed8990fdf184f5ab65614efd7c6f182f9c3d9519fa198517d3ca7c0a7bdee1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186601 Malicious code in dog-book-protected-scale-grid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50e2dfc946835cb804fbf4f49f9dca6adcc7592bdd9880a1b5fc2f3e866af4dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189714 Malicious code in subduction-xenobiology-websockets-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9d162d50d84dbe43de8e35e175e07f1bac8050e4acec2b8489426a438367ec4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188178 Malicious code in native-electron-builder-nashira-tachyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2c326aa33890289362406cb0f22eec8401d0b31d237121e8667b24eaa89de69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186938 Malicious code in farout-enceladus-magellan-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f03292d746272f6367ea408c0c0087fee9c3da9085941219a55a63bf3705e7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190008 Malicious code in try-benchmark-assert-module-protected (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de000d26f24e3e19f3f26d9ae4f37d14f920af6a5f0e283d3985c12f1414f4db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185414 Malicious code in aldebaran-biosignature-darkenergy-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86ea8e131d374cb063a0b842043d6ab3be61a8a7771fcf3a8ccd89092e836b68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185731 Malicious code in bad-eta-encrypt-error-signal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1430a541231c581ecaecf6111ee0646d539ec2f560fe6401ba786567cbe1eef2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187079 Malicious code in futurology-unuk-config-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cc3dc87d57350ae476b7c6fa02ff80510b29a0aa8474bcd75c9337425f39c94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189444 Malicious code in sequelize-hawkingradiation-protractor-quasarjet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f4571fcd4edc03bc69c09205dd532e4160f422b4b3a5e822f069e5c6aa5e483 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187097 Malicious code in gammarayburst-remark-boson-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 189eb1d8deef0058a6d5b3ebe8e29eea889830c8792bb5de6f7daaefece15c2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189334 Malicious code in sails-winston-radioastronomy-charon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cba6305df4d60ccf768e7bee2c868494cc894ecca3c96bd0b67d8009bd1a94cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...