MAL-2025-188886 Malicious code in protected-reject-decrypt-bad-big (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dfcdebe8a06399cba0d551e3325ec3887aa38ca3c9716354f910f7f99bd5f24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186069 Malicious code in centaurus-triton-library-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 508d04582683b1a2b69f84330b530a99d086493e9e8e58e18c5c504817462a69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187413 Malicious code in hyperion-kastra-paleontology-magnetosphere (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2d31eb3cd862886d18136d81f8bb0cf91c2c741c8992f6409480b516a287b79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187934 Malicious code in markdown-pdf-mdx-build-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed5368d721e6688cca2df4ecc49dce2acefe3054c59f7825db20785e9cf725a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188354 Malicious code in nova-phoebe-kaus-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 681f4e48c75028980c66fada2072c099a609df92353c8804aaa3ee73fa6ee98c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185743 Malicious code in balance-decompress-authorize-query-thread (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f691b177a7551590bfe3c1e03b03241709e2f45c80c249a71c374bd7a81cb2d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in await-async-cluster-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2e22371ae33978d78ed8ddbb073e247ae2bb8625f6d9ea550c75707b6a451d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190208 Malicious code in vulcan-rimraf-sirius-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eee5cc07ce021bc405757450aec97b3b50f74377c9def529a8b178240e4dda1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187995 Malicious code in mesosphere-query-dynamo-uranology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ade0f9fd45452062aac0899a4880a860ceef294caf0210e74d81e62b34c6889c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187496 Malicious code in install-enif-blitz-supervisor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36141e3666f8c066649d564f1f74956d7c95b2120dc6f9c0abec69c4a3bfb1b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoebe-betelgeuse-sadr-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d981dd2f34c2bbb86c7ac516f54988b4077402f3ce86235f4cab5210ee90865d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186479 Malicious code in darkenergy-google-paleoanthropology-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e7840b2d8bc4ea830f6ac0902efab2ed67a3181461cec1cc74a07a7c515f105 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190246 Malicious code in wavefunction-ariel-pavo-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3912a524aeee27b07cbb82ea663ed0e11889501b10f31b17df11d60deeb0c0ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187442 Malicious code in impulse-dependencies-spinner-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b1c5ba732a67d3f66094e9fb848726d7544d82bb0de3c82c8ad2e54e6932cea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190334 Malicious code in winston-kinetic-zenith-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33aea94bfb56e0007d05b76e2fd4429326a2eba7c08d4c4190df4b030c654c44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190386 Malicious code in xerxes-non-blocking-baryon-solarnebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ae2eb9332acb82fd3f4234327e07742b0664e9628b1ba566bae6f2422fb622e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186515 Malicious code in deimos-hermes-quantum-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da041c19408afda84511c39a5af5b767f425c262366c89f8688965f88b3639d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186106 Malicious code in chalk-supercluster-repository-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8308f3d7c65ad1b1cf899c50d43219245550c86abbd2cfe3f0fdc45785ecb881 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185634 Malicious code in async-yonder-void-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74902e60ac1a681b9bbafba9c3e430a5514f29d315ffea6a347310693dd3d057 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186548 Malicious code in deneb-juno-virtualreality-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8ab08056ce07e4b0fa7e42cc1a807d96b6b0be4eece882b85ff70488bfca3f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...