MAL-2025-189216 Malicious code in rest-rocket-lint-staged-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ef1e7e65a94f55f8c73c39b479acf45fbd81630246e7be641966e7229b33c40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186839 Malicious code in eslint-config-uninstall-mongoose-superflare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4389e7f6cba244996efe78ec18203346fe48ed7af508ed9911925bb724a6fdee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187460 Malicious code in indus-reveal-md-gulp-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5c9a9ebab25040a460498e03007c573cbb11e115468874f72229a75bd80ab64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190227 Malicious code in warp-sails-selenology-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08f0910172b210dd6224affb0c347ae9b8f4c3a38904d99e2133ff82b3f9f175 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187373 Malicious code in html-webpack-plugin-deimos-toml-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bb045f13fdeba200e83090bae2409a07346335c9f563b24f275cd3404d87132 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189614 Malicious code in spectron-webdriver-async-primatology-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4810ee66c68692cb4e0793f469d0d3874bbb2255c23b0dd696e904d2e43f0c2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190101 Malicious code in uranology-sagitta-cors-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d259b39ce436f6936ead7f53ccab2ac0cf8b65ea6395c27e67242eac3d8cfb7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186274 Malicious code in config-dactyl-foundation-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5de4251893f8cf0b528c2444bc8aef33307f0241ae32247dcc74b1eb4c4353bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189513 Malicious code in sirius-blaze-decoherence-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 427f85ee442cab5b3fd834d9f775473723d0b56356c21312d5a60d97a43278c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190081 Malicious code in update-tethys-query-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c9cdbc0040f0ab2939ef7f69498168277de65baee517b5eb4aca16ce150e5c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188302 Malicious code in node-bundle-omega-deploy-sandbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a095ecc1cc54c8a2cf8e5c0be06972400b715b4e3b047d2e5ddef93d5239ae2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189563 Malicious code in sociobiology-promise-spinner-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4487230d71098d206a0fd35e9fc7a821b5470df2725729a0aa11320abdcf093d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185714 Malicious code in axios-mineralogy-pyxis-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 363a084cb89546d1716a8e50fc4400ad1e5f3cd26c06fea728164d97c956c8b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187702 Malicious code in koa-vega-zenith-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64a04af2364592a4dbe9304c1583200538072652b566a0c4367ccac8e31b977f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190121 Malicious code in user-benchmark-omega-benchmark-socket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 695b5fa53b0ff23c05d1405285ee407040eee45a0bfb4eb1018bc5bc7f8652b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190438 Malicious code in yonder-mineralogy-ablation-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0650f663599df30ee3a2fc300f5a88b7bf4a1cd8203f2410bb10acf99ced98b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187941 Malicious code in materialize-docusaurus-oauth-centaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 145bc41465ad46b2ad7229b3c6ebc74e835f3098417c904ae3ca5c4a846bb1fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189716 Malicious code in sublimation-orogeny-isostasy-australis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51b9ee30513c8d060570cff17c03985e8ca23757d8b81faaa9bb486c05f2696f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189597 Malicious code in spawn-nova-antares-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9165a42167bfaa2160397587a1d764f3ba2df9f596d3d7bad89d935d99800188 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187924 Malicious code in markdown-dotenv-whitedwarf-decoherence (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5aaa9a0b578f1e3065838d076e1317f2e55e73fa4a622e040910b8fa3e0bf73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...