MAL-2025-188192 Malicious code in nconf-middleware-extremophile-cosmicweb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d50417b20169e15bf51384ccf1ce983d58f6d92fee9ea5ee2b2023b81eb2006 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185442 Malicious code in alphard-mui-gatsby-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cb3005addfce76c80633ae60df973892cc0a170579a5315c529dcf35c96059a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186203 Malicious code in colors-eventhoriz-react-bootstrap-zooarchaeology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa0400d978fa965e52d12202d981d0a00f84aed877346a6ddbd17443b12575da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186851 Malicious code in eslint-postcss-loader-pm2-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ec1c3484202bd2ceceb0d9cc9fd1bd478062a4ed6d75ccfeb1f473655b714b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189624 Malicious code in spica-oberon-sirius-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2795c1c908cdc462362e80d9776884cf1160dc014dbfb2f9820f5ac940eb6813 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186448 Malicious code in cypress-geckodriver-vulcan-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a8e7b3c4e75f8542f11b8a92dfb8c43d2878628b0adecc1a5af688a49451c60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187561 Malicious code in jabbah-colors-parsec-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb186f675de9916b8f536619d22cc0e24c1fc3e1dfb322b2bd221b7054c1bb08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190289 Malicious code in webpack-exec-adonis-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 857c1b3d5dd82954dd7c80c0e8fe57793032b251a6480c942c336ce83d6b774f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187466 Malicious code in inflation-technocracy-css-minimizer-webpack-plugin-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6244e10eda00ad2d9444aebb4f031c9cf8fb0640f0fcaa288d88ee353d09b560 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185668 Malicious code in auth0-stratigraphy-ursa-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11a88a92b26c3c4dc2b4c25959fb6dad8e7465407b50ab1c45e96b9a750a3f00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185783 Malicious code in beta-moon-fast-authorize-deploy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04718f9575365342a95b182394e3faf16985b0f54304fe8408cb783b9ba9d07e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186602 Malicious code in dog-daemon-transpile-grid-bundle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55edca587df4a61a434055376da40b0f9a67bbb2d201adc1b4ab8833d5c309bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187825 Malicious code in lithosphere-pegasus-jest-paleoecology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fac9378ba65444786e230b66d8117785b3cbf66c7c6c667007647fd65d49e95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188090 Malicious code in mocha-solis-zenobia-norma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 791a6cec3f182c161aa66f92139996d04af8b3bb22be7b7996080517a5e39e5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187635 Malicious code in juno-ichnology-dotenv-safe-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 661d5a221b43803caaf19c84e4206e725b644315b902ab5c3dd469c48cfcd724 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185881 Malicious code in boolean-zeta-fire-omega-lambda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2cb7f8a6641e0545bddde60dbe3e670dbd50d4ad1135e2b340018411b59be59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185619 Malicious code in async-graviton-webdriverio-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adbeaeed465424e52a3a1c461e253d7aa23522c4d71e215bf651ce7fc5cf5a79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186097 Malicious code in chalk-mira-procyon-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0669f795188c9df9f20c3ef0e98834b88a8aa721162b82698be48039ae152568 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186184 Malicious code in cluster-sanitize-resolve-omega-encrypt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcceef72f7076040ad3f53d861981ebd1e83dc7bf7e6c4bbd7c584c0c40e5a6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190324 Malicious code in wind-phi-pi-zeta-virtualize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d7ec2ba0faecdde08cbfe67ccc207c1a3d89f35b8a87f571b29483b2bee8ed7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...