MAL-2025-188642 Malicious code in perturbation-nextjs-singularity-gravitationalwave (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b165730c41881b44c233e780d2b9bde16b2fa49b0f012d8c28a06092c15347d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187686 Malicious code in key-static-authorize-authenticate-quick (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a361e5c13ed17dc3b23fef4d9066f074e538e8eb981592f1c742c994e18d15f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186555 Malicious code in dependencies-galaxy-install-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5276469197c6221f8948ff69ebe656dae79f34980fb1e4e95a39c2df8634cb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189497 Malicious code in signal-throw-pi-sun-sigma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e40c2a16112d2cd840182125f10235ca77233b407e2bf856c543f547bbbec0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190069 Malicious code in unuk-mui-antares-neuromorphic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f1ec361b50b97c7e7b7ab5f49059900ab7878e6ffac9899246ded9fccc19d11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190162 Malicious code in virtualize-kernel-string-cluster-mu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d02c544b6174c41d110ce11583c5dba92e8bbbef11967198039392a66f0ce6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188473 Malicious code in orchestrate-grid-dog-air-route (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b71aac15729d4867908bda7b5b355123208f728af5b784bf36ac34155117e4da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187406 Malicious code in hydrogeology-hydra-phoenix-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07c835ab149e1f8693cf31896af9ea13d0acda9982305146d45ed638b116bca8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186005 Malicious code in carpo-aurora-pegasus-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 546ac582d924e3111b56cd0c197fa28379cc4fcd4edc8ea795336dd44a1bd430 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187122 Malicious code in gatsby-fornax-nuxtjs-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17493a8c27f8742691d5fb50ff801a6a531114bb0524fe9605d6af16d32780de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189336 Malicious code in sandbox-export-integer-alpha-java (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d6426877b9703b2cc29ae7e3069049eb2d4cfe9a922f49dea5024fe34d259c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190441 Malicious code in yonder-sedna-innercore-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 235087749a464cd5d6b6c22ced79614476b2f65285a4ec733bc5e779af8e4a45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189918 Malicious code in thread-compile-parse-decrypt-air (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a7146ef933c1aa178443b1e6366208057596a2447d96deb31dc0f893f501187 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186721 Malicious code in emulate-earth-lambda-iota-mock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6ef28b45310e660baece35a53cab9f8cd79a0a7d8211394c43df03cc593fdd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185878 Malicious code in boolean-fork-uglify-dog-sanitize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2398286c5bd8b36359dfe96e05f9bd79387f0ed461e40f664b3528ec4bcf92a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186330 Malicious code in cosmiconfig-gatsby-janus-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d569a94adf638e19a24f0f06a1a6a865fbf7a01e48a5109520fe71f210a2307f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189016 Malicious code in quark-charon-hercules-lepton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8473c670a25ac2c4782e9d65c46e0a8158a9769fb0bb2733da88072b9a7a2c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187140 Malicious code in gemini-ionosphere-superposition-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d9915da48474b9a7fc365caff832585a7c79e69a676a479e6add1449dbf3314 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190035 Malicious code in umbra-australis-dotenv-safe-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8bed70457fc263e8d44f6273717090c9025bbc2a70a05504db3aa29de42573e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188784 Malicious code in postcss-loader-regulus-whitedwarf-paleoanthropology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19d9e1ff0973c423e2d9f4461d9daf809ea0aa47669997b06f7a4589bfbc9396 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...