MAL-2025-188605 Malicious code in pegasus-resolvers-leda-mechatronics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d7ee621db29267361daf2de5c6753f45be5ac273e82412dc7ce548125410862 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186410 Malicious code in csrf-farout-backend-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dbba3ecd123044b33d935f03d97d2a75be7a13c2dcaf66b322bb5df75f88737 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186251 Malicious code in commitlint-config-angular-init-miranda-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1a99b354cc0e80cf5bfdc8e125674477abcb0f262775850a536241b2b90e9e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187341 Malicious code in hermes-browserify-alphard-greatfilter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e30708db9226924c56d46254043ab17828ef65f1ed22ce45bc6353202adddb3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188033 Malicious code in meteor-spectron-webdriver-ignite-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7825fb698098acfc9237bd9d71a9037ffc59b30a8a2d44a9f74468e7506bfceb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186676 Malicious code in easy-throw-cron-rho-sanitize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6d96ce449ce210d1cc8716aaaef11b602c714a6a77835e62f277b6ead8df01d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185841 Malicious code in biotechnology-planckscale-nightwatch-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c7aa96051f851c7bfc81fa4bac9bafae95f5bb654923765e79f66ccfd820ea4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187676 Malicious code in kernel-encode-benchmark-interface-virtualize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76380f75d8ba6f59ab05dc5b0107949199b7af150de9616738aa35c5715dc30a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186149 Malicious code in chromedriver-json-polaris-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ef32861229671cc069a228322d0a6b1db62d689ae18e79f73f60ba5d10f87ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187819 Malicious code in lithosphere-browserify-express-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fdc8dd182e784cfc7505a87b79d3bb63e3889f3079e330bce2c95ac7d3a6778 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in omicron-thread-report-query-book (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f62ea97ed14fec7e80933898874e26a0acece68b1bc07541460b1a79ccbebcfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in promise-jovian-cli-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce7920e2648fd98b014ba6e5691d3aaa8d488968c54a9a951d7f0f09354f62de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comet-publish-palynology-farout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad7e34a4137722c68664332cd34c502192b118ed77c8083bc8e26a617829ffe0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spinner-uranology-terser-astrophysics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da7f5234df5681f13b658fb2fabff25e4b06dd41215f41a2a1bdc11964a46de9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thuban-areology-event-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55ec620b28e4ddf5c67a236718d01388f9e7c1c6a69ac3547201d98f5651b95b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rimraf-markdown-markdown-pdf-biomimicry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cc9024e58fde9dad0663362ec98c6e8589875cc63fd1fad0235b3a6cbc0dd68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in serialize-stack-omega-node-authorize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7aed9f916c9a8d5708c398fd6560a52f8c9bf1bcfe4803b4d74ac4eb04317d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sedna-json-yildun-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acebf88249877aeee58b2a6fc9b09f8390ec800872a4b8211f8e3cc5d9283910 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186351 Malicious code in cosmogenic-genomics-scripts-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ede3ff97afc807cd5b2f66f1660a934b572b18c219fc1b17e91ba7f10e09e5b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188047 Malicious code in mini-css-extract-plugin-meissa-chai-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f10f238dac0f01e63a9ce7a8c017e5600af3dee37d61959eac17ea52e027d019 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...