MAL-2025-188732 Malicious code in planckscale-webpack-json-neptunology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dac476c90bc256cd8261ff18ff844d1b911ddf79b4f68c7de94b528d89ddc48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187463 Malicious code in inflation-antd-dependencies-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bc48f01a9a0590b795023a54e9c8d0d2e398f6a53275586aed013f9c52e6719 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190019 Malicious code in typeorm-protractor-cryovolcano-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02a13bbeca9fad4181dd9e0e667817df4fb2bf290994f3f37757c86d5562cb2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186366 Malicious code in cressida-cache-iota-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efdc68100f25ab316f603e943cc9672495c31169a3534af578cd94b80cb0b020 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187339 Malicious code in hercules-radiant-jekyll-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73111aa503221d795d0710ce76a4fd9d59a208670ee93ff17fe08fbbf0aafb19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185710 Malicious code in awk-validate-function-refactor-delta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee9043f2d48fc419e060a2a442bb300237e77f77df1e7f96ec15cfcf8266628d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187192 Malicious code in good-minify-private-container-object (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b032c4996d44ce62c30eba2b2781375d7b3c99daea21c2cbf85535105cb6269 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189132 Malicious code in registry-ursa-prettier-plugin-markdown-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bce70a60b982911ae8463ded8b5a8cfc5578f573075e24291265f231dd7d8f9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187109 Malicious code in ganymede-public-canopus-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8666d987c2ffe04eca9ec038bd50b9769fb0d7618dc1d35751253b44ab3d5d39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186123 Malicious code in char-hot-import-public-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 354febe792f16564c5bcc92ba3e4c54de0a806e5195e3c623a630ff0b9ebd844 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186900 Malicious code in exobiology-chalk-xml-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b4543d90e96ff41d6222d7d115878a78a7d20d09d3e42659a068f00c0442733 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190020 Malicious code in typeorm-warp-procyon-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ca2bddcca2cdd5d54a3bc5a9fccb0b9d6cece56e2654a5b6b065097d7536270 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189157 Malicious code in relay-slides-kinetic-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7388419bf031b3ce6ff52f012ff998a88362e853ce154c3126e5a055ef8f8359 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188699 Malicious code in pino-avior-nightwatch-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e4d3ae1a586ca72cce709675ce0fa9bc7536fad5bcf6063f22852797657cdec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188865 Malicious code in promise-user-static-small-stack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c64df40d8c88404b0fcdbcfd8a46b14e2a3e655bab47d6be8f43f550bdf10edc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187991 Malicious code in mesosphere-kinetic-ignite-tectonic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20b5b6d11a7de70ebf25c858d96c58eb3b08a382c9a7864827f96f9a791eed7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185569 Malicious code in array-public-code-async-decompress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c5125aaab20daf226f1f46aa858aa081d49eb3240d4c8c2c463b4fb8dbbc45e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187263 Malicious code in halley-antares-lint-staged-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08f510611717755cfc51a3e5909c156ddd315996f9da4c82cf4c9eb2a674cc57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186644 Malicious code in duplex-airbnb-canopus-gammarayburst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 117508a86020268cd81fdae9e80b61bddc41f161e6fbf280a81788e22e70634f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187489 Malicious code in inquirer-quasar-polaris-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b2a0e0cba4ee0cc5cc0d94f2041860ea8aefd600a4acdbbd29641f201f2a0d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...