MAL-2025-190410 Malicious code in xo-nightmare-magellan-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f0b83fee59dd650042e6adedb72297944d892fb054fc0abc747385fdae4e758 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190207 Malicious code in vulcan-quasar-prettier-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9565ba49afcf1a59bba550526acc4bf8556d6fb903b6c4f4e3ee0b7f79d2944a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190358 Malicious code in xanthus-redis-scripts-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5378a4c2406d3bf5d4a642721349c3ebe3396f5805ea6a6298f597ae191792cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188644 Malicious code in perturbation-technosignature-pino-cosmicsilence (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0632933a35c46b3f196316eadeb2fdae0ced3d31736337c38ce07b478f2385b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188260 Malicious code in new-transpile-alpha-log-proxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bc8fc5b7728dce5530f80ccd313b6a0d4a003f8c1b9ef1a197bbeaa964fecf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188856 Malicious code in promise-dog-link-authorize-boolean (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1611eea74b726b3946a61925ceba39c59029db92f76bdd65a1251f03348d7c2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189624 Malicious code in spica-oberon-sirius-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2795c1c908cdc462362e80d9776884cf1160dc014dbfb2f9820f5ac940eb6813 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189045 Malicious code in quick-orchestrate-resolve-cat-tau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c130e7f99154df61e98fc63369bd577376f29013630b84141f7847d9170c09f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189264 Malicious code in rocket-polaris-prettier-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b22e15bc048395a61f688ffa84069166c241328128e1fb0ab74bb9951a999d64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187277 Malicious code in hapi-prosthetics-thermochronology-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3945b57156407a7defb56a483e3d506c0a307663ac840d78caefe669db00c55b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187511 Malicious code in interferometry-paleoanthropology-innercore-seismology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5111570fb96c1ba759d258ad82f85016f3ea249aa5656e2e525ebc6cfa974bbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187563 Malicious code in jabbah-titan-eslint-config-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f920754dfd3526e4037f94d1ee2ae2205d9eae6df972819a37ff0a02087f6c79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187052 Malicious code in frontend-kuiperbelt-proteomics-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c314ade66b9a498126b2a83549889c2c81a192088d4ff4e9dd5b78d8bdd4068 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187011 Malicious code in forever-heka-polaris-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 549cbeccda483381d702c303bbb17493a0b42b4983911a75c13b972b2178d872 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189727 Malicious code in subscription-resonance-singularitarianism-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be3d538e89b0e03b53dba84331df4a541fdba75060e63458115cecbc1e951691 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187493 Malicious code in inquirer-winston-commitlint-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8d8803b934bddaa10af678e2f1095520a0c5df75893b63ef2fb45b3564318c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189601 Malicious code in spawn-venus-hydra-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a66e971fd14bdefb13ffa29893acb4ce63a7232109a3f4246fc26be70ddc6ca6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189085 Malicious code in rate-limiter-hyperion-pavo-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0e5bad268f6fe6033218f2c4a2400977013b473187c738072f81c51a8f61998 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185985 Malicious code in callisto-cors-ini-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ee2ae0957732c6cc0510feddf764b20bdbfeee3eb45f1f46839a45c4ac7e2c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187648 Malicious code in jwt-polaris-accretion-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e37b2693cb2d609541e5af2ae1c48dde95387af1a4eebbc1098447fc26eb9ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...