MAL-2025-186579 Malicious code in development-playwright-stratosphere-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71e0ceb6921987d11128b3d9468cfe3777ed868bbcb9f3c382500437fb7f12f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186320 Malicious code in cors-warp-farout-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c13b58f1af8bf82671c841b76a10d8e68246dcd60737603893aef17271bd3c2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186201 Malicious code in cold-old-monitor-zeta-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f605ed4e638cfcb600b10d7ae557001f37d7c6fcbb1353943a4f09ea29689a88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189387 Malicious code in scripts-hermes-pulsar-neuromorphic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c868f2b930f8cef33f4482af086921d64684fe465c818ac9af2b1f199e0a258 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188261 Malicious code in new-user-static-awk-zeta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9f9dcf7eed16e352a4e0fcdb4e1c39ec368864e56f59a7c610fef54ab9b66cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185638 Malicious code in atlas-nanotechnology-polaris-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee962c55a593e125945858bddad9512cef3f2fc632fdde81c10a6e934f126d9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186881 Malicious code in eventhoriz-native-planckscale-cosmochemistry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1da3fc7db81f4f6607a2fbdcf5a7717de5cc4c1f1f869bb3a677def9b158df3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186254 Malicious code in commitlint-prosthetics-altair-magnetosphere (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60bd81e041aa9a99e170a706cfe17847a5bb8cbbb63413017b209781241701fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187802 Malicious code in lint-antares-luna-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b0795e430f9e9aba719b3b6a20ccc0a64f2fccd57f1f4a9b17108037f6fd87d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187294 Malicious code in hawkingradiation-jupiter-toml-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 093f597817c5057b6028054d85338a68c535363cae5c2a33fa92fb3c5295d345 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190439 Malicious code in yonder-rollup-dynamo-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccb52551e42d4562dd9b19f350c065ba155117fe3d515aee67334e1a53d74ad2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185823 Malicious code in biomimicry-decoherence-paleomagnetism-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a81fc4c93a8ba3ae314ab90c18d782c9b0358062bef26f37667009c6f91eca36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188643 Malicious code in perturbation-stratigraphy-eslint-plugin-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 072bd973cd0a6588ccee9353a969cc2ce090a9237b49a6635e495b5aef071c8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190146 Malicious code in version-virtualreality-scorpius-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2474968d15e1ae15d7fe3d765d5e06ca8d713e82add09b6ddc4d7083cda699b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190214 Malicious code in warn-pi-visualize-catch-slow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fd19017ae32cc4971e46154fbd9e20fc1d6dd2eb27e09eefcee04c2372bf184 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188958 Malicious code in publish-superagent-rollup-plugin-commitlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5549aa2809a51a1689820cd3b387c36f2d9dc197d3cb4f92ae2654b6b95a323d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185667 Malicious code in auth0-sociobiology-apollo-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2cc66bc3119f641f4265e679da99e399682b5bcfac97ff78b266bd68c7b2025 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187233 Malicious code in gridsome-andromeda-algol-exoplanetology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4209a265669d9b33b21d2059ee649d6f3cc53672c2263b58601de9f129e8b7cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189191 Malicious code in request-slidev-jest-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffa53dde998cd4d2b52cd4e664c246bbd1b8b32bb6fa3a6e19a44c1a2133d56f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185517 Malicious code in aquarius-slidev-equinox-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa0b4b93c5880a11a602e472cc9f2c1f1a2fb41779b5d28d02295ae6d2c12554 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...