MAL-2025-187241 Malicious code in grus-crust-greatfilter-holography (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a838db28e4304c090d7abff45df6991037bf045cae83f8cec95623bbcf772a9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189581 Malicious code in socketio-webdriver-mocha-kinetic-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 150f89806d0e3db6e1a5a953b3f96457bdd5d51522b9cbbbd9401b3cde6bcc82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189696 Malicious code in string-epimetheus-neptunology-vulcan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87799b6ccfec3c2366bd5ed81d245b37d7001448ecfa937c6f2af98929640806 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186225 Malicious code in comet-rehype-transport-entanglement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55f76cda7e3ed87a43e6e01759a8df12b7cdc8c0be725210b3f7a49e834137a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189672 Malicious code in stop-cressida-prompts-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bb962d5b873cf65209cbbdd3c78b29f2fa140fe48dc0cefcdabd5d10426b5ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189900 Malicious code in testcafe-postcss-europa-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0c0b587b82115b84377ead8bc9a56089abcc5377b44746e483ed6e69e89ec63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186464 Malicious code in daemon-epsilon-hash-link-slow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1247ea1f9679d0a4af4536122840c9b4be02d663783f7a7a4e4a006907deb9b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188837 Malicious code in process-passport-eslint-config-speleology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73f3afed2efbe84aed1b966215535f2da5ba01a01ffc79f5b28b8e3b28fd6332 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189382 Malicious code in scorpius-vulcan-postcss-loader-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31aafe3c03afb0cf93ac268b63551892f5e8e9ea5895715091958bea3218dc80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188141 Malicious code in mui-neutrino-nestjs-stratigraphy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 729cb919a6d87c0b891badd0fb0662a70c219e865dc84918201050bdf454babb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cosmiconfig-perseus-redgiant-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8cabf74a61f50af9ee6fb8098d25d2c08526d5b73a3c74ec59e714ad4cb37b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185521 Malicious code in archaeoastronomy-lint-staged-polaris-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7ff83f7a5d6fc103e22f1e1f849ed6afdf59b479690cc50d9b75086d617db1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185703 Malicious code in awk-encode-good-byte-uglify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e4cca71a4491c633a2c7f274e3a868f88632b23381903b5fa7e387991ebc55b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in promise-impulse-levels-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9759c470ef837c2329d4464aaa2de5105c8c732fe16a30f4b5456be003fc6f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186161 Malicious code in class-secure-function-transpile-authorize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e28b11cbe99b65195c5c3d27c542888f775612a52a9dec629226c3caaf70c27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185819 Malicious code in bioinformatics-async-wezen-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d985ecd64cacf5233b2a1054b7e2ed5ced314f675ee6e190abc588762b03b287 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185916 Malicious code in browserify-nodemon-proxima-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f8fe0178708beab3a0e8eecf0b864a676279dca80cabc51fa9d0f1f2d2579c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neutronstar-bootstrap-nodejs-paleomagnetism (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1485cd468c12725160c4f7c52c2420c78dc535b92bfbb49bcba56bb7a7952f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in figures-betelgeuse-ethology-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 502ea4d5d596187fc863e0bd4b1f9a667de36b53b2af2edc798a666929b4924e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rimraf-markdown-markdown-pdf-biomimicry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cc9024e58fde9dad0663362ec98c6e8589875cc63fd1fad0235b3a6cbc0dd68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...