MAL-2025-188810 Malicious code in prettier-stylelint-astrobiology-loopback-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6defb2c5feb096989f260b8521f3669e9671736f838b9e562297550bbb18bb7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186465 Malicious code in daemon-function-throw-file-dog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5a73e261a4f17a185bcca6a3ab3abc503be436cc2631043966eea2b64c29a97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187733 Malicious code in leda-hercules-restart-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51a19c1b6d4de1af3ae3df060eb4f4301b9159c50ff7eba583262e1dcef8bbde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187944 Malicious code in materialize-magnetar-paleontology-cosmochemistry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecf9462c6606c2905716e1a2464a867641a12542ae45f8c63e22e1cdfbe250ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185937 Malicious code in bulma-titan-axios-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aefa58ff6412b2a7d3639037d582e5057b746e53319c75443b3aeca613e7b575 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188297 Malicious code in nightwatch-supercluster-zooarchaeology-redgiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23dbe896a92e864c6d40edf151690e7a04699b5c221f7fbb1c21f727880dd0fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186210 Malicious code in colors-superflare-rigel-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0e903a3772257f571117e9c4c67e3181375d448e7529e39f970068e1f42f8e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189482 Malicious code in short-public-permission-grid-throw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99cebd8516a3b996a17b13a2a6d99d754157b97ff1c4d86de13c01ebfafb4356 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188477 Malicious code in orogeny-fermion-mui-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1bb0406ac1f1bb4b98f3bc29d46c584b70dbc4b846a397cfe88fa1283c87da7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189230 Malicious code in rho-enum-secure-short-proxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc98f3a6c284cfc1f088763be06cffc4b095839b8639d60ab0dc326aba9d00a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190167 Malicious code in virtualreality-bootstrap-geochronology-nuxtjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be79ba73e6ad03713c9493b36f0c5582b051a8d5650e4af98e8b737179a3b14e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189889 Malicious code in test-star-web-zeta-minify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14ee65ad7947ed824c06235e38a3aee5d27831c7878012cb2c3e1878731ccf6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185834 Malicious code in biosignature-spawn-slidev-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08678df57d0faab58f3bdefe4aa354744ee16d6eda67bc9e6e1f9b7178654520 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188596 Malicious code in pegasus-kinetic-betelgeuse-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1eeb701dbb42b94c86f002ac002aff1581d8e3f416669abce192f22f0f377d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188754 Malicious code in plutology-release-it-despina-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52a749c6fc4371a3c2293723768a233f315f8ed6aed6c686b69a16951edb77c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188302 Malicious code in node-bundle-omega-deploy-sandbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a095ecc1cc54c8a2cf8e5c0be06972400b715b4e3b047d2e5ddef93d5239ae2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186421 Malicious code in css-minimizer-webpack-plugin-hermes-spectron-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d8dd2b1b22f82ca3c1eb2d83c301404fb836de51f9c33128031bf6be4145a22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185715 Malicious code in axios-neutrino-fomalhaut-perturbation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f428902c9048480558a598f879ec355d21f923763d3b297f190013b90c371cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189883 Malicious code in test-janus-eslint-config-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec79023492b97711616187adb7b16741d7d4baf291a1de140a8c20060aa9f434 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187937 Malicious code in markdown-relay-optimize-css-assets-webpack-plugin-neutrino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 814d9c5cb9e62fb3014607e0cc8e6b132834d0f216d57d6a055d9aba26c110d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...