MAL-2025-188708 Malicious code in pino-pretty-radiant-less-loader-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56f26e9ea5896df0ce372833130544656e3589f313b17873c4069dfdc07eab2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185422 Malicious code in aldebaran-resolvers-rehype-carina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77b38fdda53cfa1032f7aae06db1706df1dea83ad971de439a15059fa83d1132 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189305 Malicious code in sadr-membrane-slides-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9f5afa3f0909d32cb9061af02d912fe9587dcc198b2456101683b37f285bbb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186884 Malicious code in eventhoriz-yonder-heliophysics-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6dedf6a6be5b51314918d364f88bad64cd52afe94c80b323f0154fa6759ffd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186714 Malicious code in element-ui-jabbah-chalk-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db3f9316015fa5ef848708130ef54aed0cf418b68094a0778716dae464213509 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188305 Malicious code in node-config-cross-env-event-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 633ba8b5bb0c1b25a73b775f05ef07535394081a99d38ca2eb989da5e9df22fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190480 Malicious code in zeta-lambda-info-view-star (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da545e17fa8329367bd0f54c706e74197c04a27ab0ae5698237ffe2b78dce9ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189738 Malicious code in superagent-loglevel-stop-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a6c222ed3fc6b5b431b69951f4f3dec5dc9dc593bbde310b59367cb4130c446 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189029 Malicious code in quasar-capella-bootstrap-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0bc1b439777658c1074981b53aaec6921f57e4b6f74d04257402b16d4c5734a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189461 Malicious code in server-child-process-cosmicray-extremophile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6316145b0472d0c005490d4ef43f0176b634b95ea76538471807b19d36ad73a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185845 Malicious code in blazar-apollo-async-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 157f9890e2f188291623ba4f289354faef1d8a1e4606545e8fd22ed345eccebb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187536 Malicious code in iota-framework-umbra-uranology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 567b98367203a0161fae816a98cc7b89570f80bdea0f12cc4757f3a09cdc4950 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187818 Malicious code in lint-staged-tailwindcss-altair-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf7fde528fcb735413f5b059ae0d9ccce85ff5d01e66637d1759cb7a0dfd4869 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187645 Malicious code in jwt-firebase-izar-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fefa055bc041a85bb3553177d9546eb4d5599e738c2a450136a9abab5d66370a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189366 Malicious code in saturnology-webdriver-mocha-registry-blitz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a5eee96b9423cd54ac4f62a065004d3dac4b3e73c78de4fb77e91972eef1fd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186744 Malicious code in encrypt-link-alert-grep-moon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e237a747a38d097627400db5dc22011d345ce71138e2e54d60ee04ba6a1a43d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190058 Malicious code in unix-scale-protected-test-fire (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 696a986920e12bc1e3cf84d12a5c637dbceadbbaf002d52fab2ca101305fe795 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188093 Malicious code in mock-sandbox-private-stub-view (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b278ec81aa032c216582a6a7be827213f777087cf4b2e0c8d2537c5889bbe8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185891 Malicious code in bootstrap-kastra-event-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a2df2510f2f174eab60a7a3916ad6759fd87b80db2bd5c6f9164cf9fcc0be69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189715 Malicious code in sublimation-archaeoastronomy-browserify-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba32b52b1e4bbb964b6534537b4d98d51c9e74683dea1516424471f869c0e5bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...