MAL-2025-186298 Malicious code in convict-quantum-hermes-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cf996ad2856885b1746d8ad7f02dbbaf7e4d0f0ead39b1688e7e449f4a6c576 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187425 Malicious code in ignite-configstore-morgan-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8906d0c8e8c3c3b8deed98d2a4f08dad36cbf617d92d432626f92cb068681443 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190260 Malicious code in webdriver-manager-deneb-nconf-outercore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5856dc3105bafd0bd895c339e371e97000f404e871ca844f86c47c579ae39d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189044 Malicious code in quick-info-star-new-import (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff8d2af4a7471f80995ba4591bc1d021217434d34977fb94879b5ed115d965a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186629 Malicious code in dotenv-semantic-ui-fusion-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 584061c298f10964689f1ef6b99e08687def32aa09801e3a0bd33abfa06b5ba3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190112 Malicious code in ursa-neptune-private-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f52b0f332657b30012e36de791eb249b16eb29d11bff1160e4f4b4e5e643cfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185632 Malicious code in async-xerxes-filament-outercore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbc6163a409dce77356ebc5ac817d18a41dc29f36100b23bca2dd937c8af4a34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186814 Malicious code in eris-callback-boson-cosmicsilence (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a197876be7cdffaa146516c71ade6fb43a8bf1e1cc1b4350b8a5ea0d8bb5a67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188411 Malicious code in omega-big-zero-export-java (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6452494d4a91b262c8f8c973f098395e47d3fd525719d07e2c95a4915fae749b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186485 Malicious code in darkmatter-build-kuiperbelt-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93483a80d5db917b2f3fe12b078b1cee95149534d194f3f15649c715de1c34e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188053 Malicious code in minify-mu-catch-authenticate-user (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac3b2212cf649bbcec1267832b53976a224b9a0387e17e082b8641dda41bc920 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187463 Malicious code in inflation-antd-dependencies-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bc48f01a9a0590b795023a54e9c8d0d2e398f6a53275586aed013f9c52e6719 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186648 Malicious code in duplex-parcel-nodejs-membrane (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa06346c89852e6b9c279cbd0b49045bb71d5ff9157585fa04bc9c20fbbf44d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188152 Malicious code in mutation-docusaurus-scorpius-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8f6271538fff9b9ee158666dd6bcb5e2c1ffc3f2da26a8a7cfa3a22b2286e59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190212 Malicious code in warn-class-proxy-cron-earth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e5331e42e3534c01268c91bde85f93841803534273b5a092c7800660b1d4ed0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189670 Malicious code in stop-callback-wezen-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43fa92762b57b343fad2ecbf79edc792490f94879bf693116bb44049f18da222 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189672 Malicious code in stop-cressida-prompts-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bb962d5b873cf65209cbbdd3c78b29f2fa140fe48dc0cefcdabd5d10426b5ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187405 Malicious code in hydrogeology-chariklo-pulsar-mini-css-extract-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d514e86e9a193b5e01631ae67c92d3d0e92c33b1e9cb062f76dee9edaf4a7576 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190348 Malicious code in xanadu-dotenv-safe-markdownlint-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3910fdac95250d53aecadede785513f9beceed180e4330b90a3808d260b82a43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188188 Malicious code in nconf-aurora-ionosphere-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90d618fe2bbc27849bdb3b7ab0735de3ede48bd7a4f02e7614ea1745ea65ea02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...