MAL-2025-189544 Malicious code in slow-promise-delta-root-view (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 978db9873fd5163d504d6dcef0b180a56a9a49e2c99ee402c0549f5d2eb165d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190220 Malicious code in warp-dotenv-safe-andromeda-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0a402fc1c0185cf4c85d8102b322f31b58e6c77bc884315de297df083490dd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190280 Malicious code in webdriverio-meissa-terser-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b8566a6641887982db2205f4d70303c4107005dc5398a21da2d4cde72b86274 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189225 Malicious code in reveal-md-electron-builder-chalk-steganography (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dad219c6c13a2f6799e4676b3d3104655eb69ed912f81bfa7f92b9610298c61b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187560 Malicious code in jabbah-blitz-kardashevscale-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4011abbf08341d1fb7ee6940821bb4f174b5d2cbc04bc0d2b44148c74c88e25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185943 Malicious code in bunyan-callback-pipe-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6c6a30fabd9762255234275520307cd432fbd98a02b188eba9e94d2334be6b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190461 Malicious code in zephyr-dotenv-technosignature-uranology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6c213aacdb33c9710b0725f1700b663eb0a518bce1ee299951a5d392aa2e9a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187366 Malicious code in holography-commitlint-xml-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2eb59ca534b23129e0bf53a8b51be5dc5a21ab32c8f17d2cc49aff38bc7718e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quantum-computing-mira-volcanology-sublimation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed13dadf05282b70bd7d95e5d68f12f1c859b52657077d68708f28f54eafe677 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187509 Malicious code in interface-iota-tau-optimize-bundle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b927af0512416ad1b31f98ffedf703e447bf20dc26407cc26a66d63f8cf2a93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188250 Malicious code in neutronstar-hologram-volcanology-asteroid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e16c455d2bae43492d5ad9590dbe8f3ae4aebfbac806f385ed676a3856de3121 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187234 Malicious code in gridsome-enceladus-aldebaran-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ba47005bbad795aed1582ed6125855eece33c38e5df19b44c6ff5f44991e876 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189047 Malicious code in quick-validate-transpile-cluster-route (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fee10f0bcabc32d9ac66632a283a2ba700f31cfdfd2a8f280a980368720bf754 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in local-ursa-karma-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 773b5f237f0d46e775245f5dc04ee614693a922904809c9db79ac94c63b51f55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pavo-auth-sedna-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f8d23d3284dfb5d8c816252d592abe31569453c9b4989f3dbf8910826ee9a4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in archaeogenetics-astrochemistry-quark-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9101bb249512831ae69aebab145195c2c777abc6fba8d572f58c08df4437898b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phenomic-google-antares-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fff97e545d5e2e9db5b557728fa65896b848a234061eb2b80fabc1f5a3203d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in superflare-paleoclimatology-pavo-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39d337f363e6d9af72d6c6c58ab9d0b6cff009263226481ce03f76293b809c53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in remark-dorado-coronalmassejection-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c257d759eba4d91017038da2f152a2aa335339afacb98736807437b419377fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187888 Malicious code in lyra-archaeoastronomy-graviton-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8899ed7471e985e84376208e83bc674a3f185c1387225341796fa134880c727e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...