MAL-2025-187450 Malicious code in index-error-cold-earth-encode (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 600c58f15b415a9d7152de753764755c856d4f1b2801557141a9e6a851d05879 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190047 Malicious code in umbriel-leda-pipe-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbced70f13ff299b1492268d064d3da9078e4feed78b8d6225d5a2cb765ff9c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188720 Malicious code in pipe-grid-byte-old-array (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 707c043a8df19e2deb325b85449d0ea39297d0bfab853cf484146aafbc444bd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187757 Malicious code in less-loader-react-bootstrap-cosmicray-spectroscopy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34b22a3237ae7e67de2b1fded90e8aad83a6fa3a88ed44ce7d4329367a38aa5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188363 Malicious code in npm-publish-cross-env-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f326fe849575cb4d47994a975a7fe829719b21959ffb49ef1ac24126a1519ae8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187520 Malicious code in io-cordelia-meteor-filament (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37bb443e8b535dc59175b1ef8d7eb72d284f31f0b56ff72943312cddcb025736 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188670 Malicious code in phoebe-cosmicweb-meteor-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fb63d19ba7cfb57e738cd006c9c4288fd17ceaa3b39d6a4fea1b3b1562678cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190081 Malicious code in update-tethys-query-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c9cdbc0040f0ab2939ef7f69498168277de65baee517b5eb4aca16ce150e5c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187976 Malicious code in meissa-steganography-helmet-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 063f1e0ad2c70958a4aef76f30c704044b1b584c2eeb5dccc001e746c7509ade This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190309 Malicious code in weywot-wezen-cryovolcano-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 151eea28ab25328885136b6b5a720bbf53cbfbe5d4fe9151c88fcded1befd164 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190371 Malicious code in xenon-ganymede-got-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd3cdb5311de65ffd938d7edee63411d617e2a115eb667ee052b558090a5c0de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186878 Malicious code in eventhoriz-ariel-atlas-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92528c607e087330fb36dbf06bc64f943543eede0e85245ebaa7e3c0e0699c86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189023 Malicious code in quark-perturbation-lyra-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ae7d9e05afc9ae4b162ef3a5a90926fb02dc43eff61ae5189e999b8eba1ab58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190240 Malicious code in water-catch-cloud-upsilon-java (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ee923d12f25e195265318063f9ca7aefda531762b20e5da248f7248ff39084f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188243 Malicious code in neuromorphic-cybernetics-cosmogenic-neutronstar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 160b9ee422b1614bc10ab76b17cfd59829dd820e115922f452f8253b0f2750f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188726 Malicious code in pipe-simple-virtualize-void-stack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 926400f6a4cc531e4518e04fa52cd0abcc7786a74fdcfbe3009d4e7d91669f67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188727 Malicious code in pipe-virgo-perseus-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9eabf39821aaededf090315d40c3c4320f647abcd27814fa1d3d9f16e2cdee3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187116 Malicious code in ganymede-warp-astrochemistry-jabbah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 647b20049a1713f442e3534e7043dc9015c74523dcd965708c39cdd9ec112639 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187532 Malicious code in iota-analyze-transpile-iota-abstract (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8251666c7b11f2df34aa4f023b3fc2fc7c85966a9f6a37223dfd3d1028ef753e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188131 Malicious code in mu-dog-proxy-decode-unix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88cdfbf38d06291aae96e832f05b29f00cfd35589943f585837dc348ec6b1fce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...