MAL-2025-190409 Malicious code in xo-morgan-css-loader-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df18935c38976d8952bf589369f1a0e87fbdb16e09e484594e5e302fd8d55ee6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187442 Malicious code in impulse-dependencies-spinner-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b1c5ba732a67d3f66094e9fb848726d7544d82bb0de3c82c8ad2e54e6932cea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189311 Malicious code in sagitta-child-process-subscription-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a9e4f79fd0c3aeb2ec025b492be6595c46a1ebd399bded942c4524796255bcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187092 Malicious code in gamma-integer-hash-double-tau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68843289b91c66d58ea6949f006e97f32e4b097feb47c1b22cf3d57e75c7050a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188906 Malicious code in proxima-antimatter-express-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8b4b464bd726e60d3c7eec51d106ebe982b5d2c3a00d8c321279105ddd4c030 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189641 Malicious code in stack-theta-meta-index-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1540d87914707a278e9777b85d134c2c627f02d165bde85e7f01f8b9dfe3237b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189924 Malicious code in throw-async-object-public-integer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10aa1d7a7d6befddd3451e86b4c9d3ff5167678967dcb13fa5be0d980ffd643a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189804 Malicious code in taphonomy-commitlint-kardashevscale-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 695ffb95ebfbe4a2099875c019ec792a3a780ee83517b91b3a5b79d3f44c0036 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186418 Malicious code in css-minimizer-webpack-plugin-brane-saturnology-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64b3a15e647657f89676e3a0ec4db2727fc5da627f8ec6d6e710edaec52ba97c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188945 Malicious code in publish-alphard-convict-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b33c2a363ef96b131f8808426949e15ed28221d6374dc4b5c021fcd973e62636 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187082 Malicious code in gacrux-farout-publish-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 452c960aa8905735a4d5f1b36b9b11902ec192984de6bf397eedb20365903d7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186523 Malicious code in delphinus-chromedriver-quasar-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd60d7806f9457c591f355001b125b114764a71b5d93355057a3434d1a91b5ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188941 Malicious code in public-perseus-zenith-blitz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1e0fda9529023a9e7ae60ebe50dfb049b2ebe3a6ca123f31ad56a1ef6721213 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185472 Malicious code in antares-planckscale-helmet-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2f72530dd247b457218e0e4f8916ac3dc415a8a2eab4401eb9bd37f23deb50d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189049 Malicious code in quito-cryovolcano-nightwatch-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01a24e9acd11ed85f87985112d1bd7cc1e77631e7593134f4b3a95d72977e303 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187003 Malicious code in fomalhaut-dysonswarm-ablation-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9a884813ac7d064b0ede3403c8c60d84d2bf63aec4d31810dece8a01d28e24c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185497 Malicious code in apollo-areology-tardigrade-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca645c1e73422a65c8b79fd047b60d4ad87534ee6dd87cc564d09d207e3ff405 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187483 Malicious code in innercore-biohacking-aether-inflation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4624518d19df6decb94a7fc1c16a63c38a1ad699a14920802872453db27d850f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186151 Malicious code in chromedriver-non-blocking-chariklo-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69e3235429342473e1c54ce4bcd3e40bad9b9b47232d9bf913d071fe49eddd8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188714 Malicious code in pipe-auth0-barnard-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93b3b68d9a0c694ca31182e0583f4bf4ee987574a2c4a765974633b4f89dc72c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...