MAL-2025-187255 Malicious code in gulp-prettier-spinner-parallax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc58ea571f5bd14201e5b992627f478b50a21460535b722143de565ef267bf57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186087 Malicious code in chakra-ui-fomalhaut-on-cosmochemistry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 626310491e4df1062e97b696358239f834cf757c5dfba5eeebcdb0c80a0067fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189938 Malicious code in titan-fusion-virgo-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4501f11a2deae04085746254e3f775d5d1da1b5a90819236beb332f1930c3d1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189374 Malicious code in schema-dependencies-paleoanthropology-xenos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a5aa35035cef2c1cc6c6bdb74528d86c9297519b890f65258d575cbc34a28f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189885 Malicious code in test-on-spinner-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93b3148fad24442f075c8707e11b5a5bd042be189f67c373b76d73ef2f18c289 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189284 Malicious code in route-await-root-monitor-nu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29fb642731ee8fc87309e75918ade51ddd54aab1fb69f028bd0f8a5656b0cf53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186013 Malicious code in cassini-html-webpack-plugin-loglevel-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c9033f1763d5ba00b031a7c88ae9daa1fa6d813e089bdadca8c7150998d3917 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186671 Malicious code in easy-kernel-deserialize-public-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1c7f9693c4ee4fd27e0d30c8a5e7c70561a199ab73f1468b17ef1596d9c03dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186647 Malicious code in duplex-lacerta-link-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bade7eb4d1912f4a4adaa57c5a552d18bf4ea7cd965d9d597d05876253f04638 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185617 Malicious code in async-encrypt-void-user-upsilon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7a36e99ef3a68fdfbc6ab3992a4fba166028b2c2f3e8f022aaa922e249f7eb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188998 Malicious code in quantum-computing-mira-volcanology-sublimation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed13dadf05282b70bd7d95e5d68f12f1c859b52657077d68708f28f54eafe677 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186419 Malicious code in css-minimizer-webpack-plugin-firebase-corvus-supernova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b02a5aa11d22cf97489823152a632b2494558466c81b352b58380b9d679dd3aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186623 Malicious code in dotenv-safe-norma-vuetify-paleomagnetism (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccad51f031eaa94c4ba5ee1a9ff854e2f73daacdc4dd9892bd11978d178526b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187666 Malicious code in karma-cross-env-mocha-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc707037d54ddbddf16b2cf0245a7546cb636b2bd26cc4ef826e23f5433923df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185952 Malicious code in bunyan-spectron-webdriver-less-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea996c13b6b5a184710be958777615f73170e5e8f3a5e8fb00260064a7d769c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186041 Malicious code in celeste-archaeoastronomy-despina-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8c86b174fa7f441665264408c849b5a246c6da4cd40a9e62d57bbf70b68a32a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186603 Malicious code in dog-process-file-file-moon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4e1459e69ec028b22bba506edaaede14ac3a45a1b48d29ce754a8be9f0a3522 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188645 Malicious code in perturbation-thuban-neuromorphic-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2fa00f740ade73172c617afb80c51e53ffc4ec855be446bf8bdebf9b4ecc976 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190033 Malicious code in ultra-mira-centaurus-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7451d5363e279f93ef5dbee433d1cda8986b6f0b27bef6015f624c91737ad440 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187637 Malicious code in juno-pyxis-barnard-perturbation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03ba7667bb839b545547f830a7cd64064ebb2ed6a65582c2229a5f9a02be6dcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...