MAL-2025-188401 Malicious code in odin-nightwatch-singularity-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d3c3514c74c10761cf5de7d75f8f020b9df8cedac55d8dd56c69d1470045cc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189266 Malicious code in rollup-neptune-webdriver-manager-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9641ae1a94bc9e9e2736447da0d80427ac96de8cf3e3560ab39d02c7194a3db1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190326 Malicious code in wind-quick-char-yaml-thread (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddce2ad9ae1e5a7ff23e318e9d892e2368904076cd87af82d0c6e57a8ee5fd2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185827 Malicious code in bionics-geochemistry-request-supercluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cac740f28941da0a81e3c884f0b32e4cba846dc3c9eb99be0b220455fa4c2bf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187390 Malicious code in husky-build-toml-troposphere (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00b004e07d0723764bfb0cbb6eb143a7cfbe71535a13c106188bd71e867b1013 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190117 Malicious code in ursa-rest-fetch-thermochronology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8ca6bd38ffe7f61ed5f1440b7c2a5f5480e04e3166d0a85a07fe4c3b24af40d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187473 Malicious code in ini-quito-stratosphere-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80addd4c113b2cc5947537311ac67c987723ef1ebcd79a98f25b63fe603be5e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187308 Malicious code in heka-puppeteer-phoebe-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 274b0153c42d4b1db33abc0d693e2dff67d8ffbd4ac59765727dbf9d7991c87c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186873 Malicious code in europa-ursa-tectonophysics-steganography (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ddd3742b1eac53007ed3bb12abe1f223c0ce4cb091ba778c9caa9c9349ec244 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187085 Malicious code in gacrux-supercluster-superposition-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fd0f296964ee5e1b57fefbbe530b24988b598dea0bc5f6477df3d3f09c666a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190153 Malicious code in virgo-airbnb-accretion-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55a7702c5a721ac4a0963beff2c7e3a9eb72bf450a8c26af1e7bbbb2e5aff543 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sagitta-jest-orbit-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97d53a4bd4227f567dec059a9f2b201e3dfe39d01c0295bb6b17cd914e8e4d7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186202 Malicious code in cold-phi-cloud-cluster-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f0e9984087d6fc6265ee22bf94590da86323c7d97b5205d237579d0a5556bf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185574 Malicious code in asjustmeteai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 488a12e01a7d9cb98b0bfd0c661b0036427ab1ea7bf5bf5c505c75751d268134 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190401 Malicious code in xml-sigma-meta-daemon-delta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9814f634f331ea15ee456dadfc2e7f1468d32fd0e4eb9ef64568b3b1466cec6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190291 Malicious code in webpack-quantum-babel-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 980725b9c25bfa17ccd89e3880bb009f8c98c783a0dd7bd6e66cae551e1ae5bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185803 Malicious code in big-monitor-moon-iota-warn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 616c7a209c16dbf7dfd668237b485e9f42ad3b48269110d1b28ac6574c83aa7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189108 Malicious code in redis-corvus-transform-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53578cb8707c6a8f4d8cf11e99a8d46d4bb1ee0c918484fb2167d78b26b8b3b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187592 Malicious code in java-short-string-java-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d597eb3065711f0aebd72850a6455f97fec66df5b0b7ebbbf9cd4342dba73aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189071 Malicious code in radiometric-nova-rocket-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ca38aecb47598dcff305898e0ce7687de1ab15863e927bbeba1da96300fc7ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...