MAL-2025-185454 Malicious code in analyze-signal-bundle-query-mock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e9ac109472152832caa800b02a3b34b918e75736ec1e24c065add9391558992 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186704 Malicious code in electron-postcss-loader-yaml-pyxis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8dd6b06620bf85f280ff8659339047adecb9bcdc503d3a50fafb169483256ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189963 Malicious code in transform-command-cors-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec1e5fdd3ff42bdb4fc326565165f244de82f2ff60b02bda4c9ec28c93e9da73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185936 Malicious code in bulma-regulus-mesosphere-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 281f479ece7de40bc39ab4a96afb7d0448b253e2e0d29cb27a021bc83863c1ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187710 Malicious code in kuiperbelt-nova-parsec-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5005685248afcbff87afc6c58f65d21755259f517acd39c3c946f53539dcf6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190387 Malicious code in xerxes-nuxtjs-enif-superposition (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a3df68c1dbb342fe2e72f7fab9e48410d45a2321d9e4454632ee3c0f2b8aeda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185641 Malicious code in atlas-standard-ursa-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1c6f3fc3edf4f35bc1bbdcbf1b42b067954257dafb13d5506a7dc70a03f6785 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190134 Malicious code in vega-panspermia-jwt-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32aaefb2b304146be7e51b1b87a1138b39ebe4660496ecc7827d7ad54346ef5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187425 Malicious code in ignite-configstore-morgan-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8906d0c8e8c3c3b8deed98d2a4f08dad36cbf617d92d432626f92cb068681443 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185453 Malicious code in analyze-meta-error-chi-serialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38af8bd8e647f4b19c41cc9074e2ad04540c78db7931d6d32f603a36b415cec4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188427 Malicious code in on-planckscale-sequelize-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70a3c37c29d63137b925a439d0cd60573ad4197d8fd7a29d345d7d027321c18f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188504 Malicious code in paleoceanography-sedna-axios-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 417a4d25dc5489d82b9a2aaefcffbab73253602a3712853452dca2b81765fd6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187405 Malicious code in hydrogeology-chariklo-pulsar-mini-css-extract-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d514e86e9a193b5e01631ae67c92d3d0e92c33b1e9cb062f76dee9edaf4a7576 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187725 Malicious code in lambda-daemon-cron-delta-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14fb54f754c0ebae3c47333aeee6383f8571f97acc80cc251881087f1353d280 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188411 Malicious code in omega-big-zero-export-java (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6452494d4a91b262c8f8c973f098395e47d3fd525719d07e2c95a4915fae749b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189540 Malicious code in slidev-scorpius-dotenv-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35a54165db7da361334553c966eb5152e75555cd344fc44c637a633e938c7a11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187114 Malicious code in ganymede-tethys-jwt-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 404215b9a56b2a2fb508a19ae3dd7a8e028cd7ee171394ea28d87123eb72e07b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185805 Malicious code in big-static-delta-private-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7c19f4f55da1e68f44c184f89b76a5bd0c9065e2d9e3b0283ed0a3221412d14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186275 Malicious code in config-darkenergy-heliophysics-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b3f2a08be0835c663a99803c2a7fa6298b462438acf40f200e42fac09cc218c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185732 Malicious code in bad-grep-web-private-cat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1d19046a243867da27ff2fbe8d4c548771683ae883e3ca87a73b415622faf09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...