MAL-2025-185515 Malicious code in aquarius-quark-materialize-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1361235dc778d6f5cbccdd8b3c169fe0d8621f1ccbd26ff529fc2b01bae8e0cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188979 Malicious code in puppeteer-fornax-prettier-deneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80a4f13a778c9f14060b5577fcc6ca5d624a55969ca1176e475251c8489bb9ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186174 Malicious code in cloud-star-parse-fork-sandbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8952f1c640e356dec0fbec116b2f433817d877347505c728b5161b584a49ef99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187416 Malicious code in hyperion-prettier-stylelint-sqlite-rehype (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6521de9c655dbd6f20939704f17ffa28a37be1b632cc49a17cba0b908977d84e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189764 Malicious code in supernova-equinox-singularity-robotics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67f56679cc22b11e8ed02364f4ec1180760f81d8fab695bc66756a0de7aee591 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186281 Malicious code in config-xml-sirius-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a58415b6cbe6528432cf6e1e8cd55074b566f71bef9a5cda12bcd5ebc971b522 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188693 Malicious code in pi-authenticate-cold-encrypt-alert (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66ac2ec191304f45d1b827faa2c4ebc3b52fd5f3ba53ea48a1c5a28dafeae6e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188307 Malicious code in node-config-lynx-cressida-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1a8390d9b4f7f0ca066259c5d2fb5a70e40e66cc7525724d3aadbfe0acf5fd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187450 Malicious code in index-error-cold-earth-encode (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 600c58f15b415a9d7152de753764755c856d4f1b2801557141a9e6a851d05879 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185485 Malicious code in apex-antares-polaris-cosmology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37d14b374c2e4ed828cb310ce2dc54b05a5bd88eed2f4f3a9b85637b71310abf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187066 Malicious code in fusion-nextjs-iota-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2739ca69baf49a58e1a18599d116efe40fb26d5faa0c30a424d82a862f56e333 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186077 Malicious code in chai-got-pino-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d4038eb99c7a3c61857cd8ea91f7024e5f1510152d4f3c6577ad77a0bfbd3b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189730 Malicious code in sudo-yaml-virtualize-encode-pi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 472230c24a499cc530e4f6f10d962aeb1fe1c8006af18fb249913614d62012a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188029 Malicious code in meteor-octans-grunt-kuiperbelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6453ada94af1f9b899d8eb2790c3bceede6d346d92601996f8f8fc7cdd7ccc2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190240 Malicious code in water-catch-cloud-upsilon-java (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ee923d12f25e195265318063f9ca7aefda531762b20e5da248f7248ff39084f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188868 Malicious code in prompts-capella-node-config-biomimicry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a5f5aa037e69c5712a92678019d6d286a73fa6b441140f34d4a29bfbecb25b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189022 Malicious code in quark-loopback-palynology-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d40ef0f2be07d54e6e36d6b88eb13d24800f9598149a61a58a5a23014e5074d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186407 Malicious code in csrf-callisto-hapi-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3353f2b88309fec3f0a2db16bc2c7dacbf46763f6ef7ba45dc6a3742e6ec2f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186497 Malicious code in debug-tau-wind-gamma-sun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 582520f95fbf0e1692946045a6fba130b71d303856ba7dde1b89b2b426d30d57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185361 Malicious code in ablation-entanglement-got-epigenetics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8c9524739c912fc11604d6c93045b1cb8aa898c7abe96b855fe424639842b8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...