MAL-2025-187002 Malicious code in float-rain-finally-yaml-air (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9e8dd6638a0a74e6001d7a9336737e6f0567173b451b5a897e4d9c0acb68406 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188655 Malicious code in phenomic-mesosphere-multiverse-paleoecology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d83855abd4fd98ba8b8aa8ed34c9927442c29ebcffdd6358a39de10ac4dba6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186335 Malicious code in cosmicray-foundation-nconf-plutology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0dbf7483a11bffe55186498bb83116d92b8305d73d895046151e98bcb9b1025 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188387 Malicious code in octans-command-io-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 112b69f2e1d1d7f16bcd45f8c8495468b99b558ec30f33487b4df15845885c7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189928 Malicious code in throw-omega-catch-hot-sanitize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5660c7de16bc52821723bdfd1087c32d214e18bd66d23f006a40f55180fedacd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187248 Malicious code in grus-schema-odin-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5015d8e05db5097f2ab0758f0d0d42285be94e469cecf52668d3df1eaf57c9f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in node-sass-commitlint-lynx-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb7d81eb99a4b615630e9110e9e4e09cc3bdc9fe3ab07efd0d8b6117778b75e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uninstall-semantic-ui-await-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d54cdc877af56ca1cfb7dbad3c96a744be26cd760c76bbef5ee6ca64e03bc210 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188930 Malicious code in psi-monitor-old-hot-dog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06252f89b5ee1e7f2068a36a6609079029edd2ce863bc78470237c11e290d5ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190260 Malicious code in webdriver-manager-deneb-nconf-outercore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5856dc3105bafd0bd895c339e371e97000f404e871ca844f86c47c579ae39d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189967 Malicious code in transform-pegasus-await-volcanology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbfcde636d0dfd289fe2cfdc5ba798625e060a28cf43ffaa3fcf7db288428639 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186635 Malicious code in double-rain-protected-import-monitor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8581e04e65ec57750c45a77518bc0bde32027cce7cec3092673048972abc390a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190413 Malicious code in xo-sequelize-thermochronology-resonance (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e182fb3819c16f6cc287c32a13afaf3df0329fb225a9f3c84ac6513d88660bb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189033 Malicious code in quasar-promise-kaus-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 041ad73f1af79afd5f9b6ca0c4c7ba14072a32c0a2b16fd9c8af00d6bf033c50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187862 Malicious code in long-zero-rain-daemon-refactor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 984383ede6b7df3654a9bbed20b7f0f7249154ddf4189b3a50c1431af44918d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189110 Malicious code in redis-markdownlint-meteor-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3a10cbf1ee2775582f30abe53d0ddb3e5f06c22b2b5b175c8ddc0924d2a93e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187114 Malicious code in ganymede-tethys-jwt-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 404215b9a56b2a2fb508a19ae3dd7a8e028cd7ee171394ea28d87123eb72e07b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187706 Malicious code in kronos-inquirer-promise-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 061924477c364a15646e4464bbe03fb996300c139bfe1c00cc40eef390aa71a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187258 Malicious code in hadron-hyperion-tailwindcss-tectonophysics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 410cbba985bbfb9ca1d7499341320dce8ba4d0f010184701fdba21e7b5b9d465 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187280 Malicious code in hapi-zenobia-superagent-geodynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13954284061f6dff2946a7a8ea7e292f2e0a5c843b31c80ea8709b8cb7d11028 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...