MAL-2025-188962 Malicious code in publish-xanthus-cypress-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cddde1a52ce767fadb05cbd31671938c574d95abb54b2c3e13d2a133ea934da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189324 Malicious code in sagitta-tachyon-rocket-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87105f7a55705922e8228e6ee258afe22d3eafa3dd23c68fa837dfbbac199b56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185464 Malicious code in antares-cluster-ursa-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d84a4b00a7033fc3fa3800a11c657e0a534a6b461ccf0deda2a4f531f6b3468 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187644 Malicious code in jwt-antares-chakra-ui-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9411bd44509f93d667ced5c6dbbb2a8adf996313e23fb5f37005d64f9a0e6f22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189136 Malicious code in regulus-protoplanetarydisk-quito-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68aa10411418a1e9162ef35ed572c716c7be7fd3f732221752c375e50f69b740 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in protected-reject-decrypt-bad-big (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dfcdebe8a06399cba0d551e3325ec3887aa38ca3c9716354f910f7f99bd5f24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rigel-levels-taurus-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daa91034c8b8b7eaefcabb701f38524d7daf0f7c5118a46df8eb3ede6cf5e30c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189583 Malicious code in solarnebula-betelgeuse-mui-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d8de60c105978945920dc38697ecb14795c8f5a537a62627e59ecee7595ac8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188347 Malicious code in notify-omega-process-kernel-protected (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 227e8588cf0cf575c422c862ccc3a11b88efabe78157d3b60216f9835b90158c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187282 Malicious code in hash-char-new-alert-sandbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 157e9621c61fae908d1e7be8b87a7307a60fae9033b01116533f0b50fe64262d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miranda-markdown-pdf-rate-limiter-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e691ac26ae0b92394354fcda674316914c8f0464d09a7681898100fb4da7308 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186653 Malicious code in dynamo-leda-registry-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c347466e8c07922985807bac40056e427e02532dcf757e70cd0833d2f05383b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186727 Malicious code in emulate-throw-root-meta-file (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 222842128022401db2657f4a22c7080f888c13de337235d91c1db8bde19cad82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in standard-apollo-tardigrade-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40754cfd5d3acd3d0b0766de8c414360da01d745f7dd08b9ca8e853ae6750b6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185624 Malicious code in async-lynx-lithosphere-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43ec24e13dc5676cd39326afe618afe0b9e4435ea88c7c601c8b2053d26a6c81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in framework-triton-string-farout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb411fea7c69a21a400b3efd4d901fb9e34e1151f1fe103fa76e85315c011e17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188863 Malicious code in promise-selenium-bellatrix-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 192014beffa1439654661cdd153d050d1b59764db49ed8256a5b6630ebbe3556 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187444 Malicious code in impulse-figures-inquirer-oortcloud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d38d8d4fb510c1c54c1d27c641e6b1543a070d7cbacd039c962a793177528edf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187817 Malicious code in lint-staged-superagent-eridanus-bionics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 066dc6b85c08093514728ad74577e54a20edffbcf7d838638c2e8ccbdc1dfd28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187170 Malicious code in geomorphology-materialize-perturbation-accretion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f950d80fddbff7c9f345af602935a4448041c71c6e3aa0a96f263a4b8a2207f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...