MAL-2025-186161 Malicious code in class-secure-function-transpile-authorize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e28b11cbe99b65195c5c3d27c542888f775612a52a9dec629226c3caaf70c27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188149 Malicious code in multiverse-terser-webpack-plugin-vulcan-redgiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3baa1735030fec28c869f9415dedd3770acbed82aa70c4034145b69388e3ca53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189197 Malicious code in resolvers-foundation-library-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c05e9755af5296428d20e2af407f0a2bbeeb2519e0199e94b2aca7fc6210c71a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188784 Malicious code in postcss-loader-regulus-whitedwarf-paleoanthropology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19d9e1ff0973c423e2d9f4461d9daf809ea0aa47669997b06f7a4589bfbc9396 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187967 Malicious code in meissa-ethology-centauri-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e6774ffcd11a4066195a9f84a607d2f890cf53790c5453023adadb6b0b46724 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189344 Malicious code in sandbox-table-async-void-export (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72eae7b8d712aa5d5e83ef1d75048d703c8d4e2aecb113194cc338645618df7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189393 Malicious code in scripts-yaml-janus-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef6ee6e47d29dabed3deb7f87e614e389d9e327843fdbb45445af49f77255504 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189539 Malicious code in slidev-rigel-uninstall-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 369f65bcbf5e2d48d9e17b9296807921545dc9a753ca7caf4e9eb9308cc8b5af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187390 Malicious code in husky-build-toml-troposphere (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00b004e07d0723764bfb0cbb6eb143a7cfbe71535a13c106188bd71e867b1013 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186225 Malicious code in comet-rehype-transport-entanglement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55f76cda7e3ed87a43e6e01759a8df12b7cdc8c0be725210b3f7a49e834137a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185724 Malicious code in babel-singularity-got-hadron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a774faf06bed4991c85dbf810dd99be5b33abf9179b3e4990f8badb3738a1cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186502 Malicious code in decoherence-fetch-wezen-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b1b0435545152b75f4c01e16249ba939d98661962b8cb6230d3971ee63181e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186900 Malicious code in exobiology-chalk-xml-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b4543d90e96ff41d6222d7d115878a78a7d20d09d3e42659a068f00c0442733 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190178 Malicious code in void-exoplanet-ganymede-geodynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c9a2c790225f2e208964e0a25bd71c0f64b5307be9ad53a6361c7098f046d5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187404 Malicious code in hydra-regulus-wavefunction-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6a0feec94c7f2caf416d31bfddb17c067b095aa118051f9ba4b9b3b53c348af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189724 Malicious code in subscription-nightmare-nightmare-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a7cc33633fdcb71ad9cde74bf5f286e45a3fc893122e6cba8a51fd7ffdfec5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185663 Malicious code in auth0-astrometry-build-decoherence (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ddb2af6386f10337357d55074c07990fba893264b9da6afddbc5272c996d2c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188974 Malicious code in pulsar-phoebe-apex-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97e5c42f40f5c45ce556ed2565617986c5bca5b1f854d73a577665555ca50a2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189494 Malicious code in signal-authenticate-cluster-await-byte (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a9c4b67b3adc6ae2f52304f08d24dafce84d84d9f5fa1ccbc8017c2dc638b4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187950 Malicious code in mdx-cluster-oberon-terser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6b8965688eff1e36ec9fec0425e4607b126d84930fd144532e03bc22d45cf69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...