MAL-2025-186926 Malicious code in express-buffer-quasar-reveal-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b57194e111538f98b9fa0a9a4608e20901da6e8c1d0755d9b65444908296ba03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185468 Malicious code in antares-jsonp-charon-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a4d80577e0db7da7c6c0f0734eee7b372d1ea0a1894b44188cf2593f584973c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185355 Malicious code in abiogenesis-cli-tachyon-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3731d79580a9a1a452610b6a842f4635104e983316a54b1cf97ef46f6b025b4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189390 Malicious code in scripts-private-frontend-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17ee0d82e7b76d99e98e6b5e612406912810084d5b57d4191123608980275a0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190235 Malicious code in wasat-pulsar-exobiology-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e635e404118b2e59ba1075a23a30f95a3df3eb263ecfdadd9ab1f39c6019e89a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186240 Malicious code in commitizen-eclipse-sadr-chariklo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 003be40b652756a8eba0205c1a4a61f63cfc4136def4cf7aa389bed75aa2f8fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187591 Malicious code in java-orchestrate-awk-process-virtualize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23029396724af0865eecdd010c3f17e6739fe0ce56c8d44b3531fbdeac934801 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189140 Malicious code in regulus-winston-lepton-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8893e4de90f91d41a2331fed671b5ca45bd61ed7e48d99d1ceb457af9b93abf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186822 Malicious code in eris-writable-docusaurus-on (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 722d4d900728b73a74cce7951c7c4f7bf6d25c2474c3ebdb2614383d6b187cfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190302 Malicious code in weywot-phoenix-betelgeuse-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e4bc442d8873cd68c56fe61c66df8a408f502757c0c8ddb89374f722f785995 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189885 Malicious code in test-on-spinner-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93b3148fad24442f075c8707e11b5a5bd042be189f67c373b76d73ef2f18c289 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186513 Malicious code in deimos-ceres-astro-isostasy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bc2c519d821e0ab1fee4f93357d29d7e5adc440d117d25390326ed450e25002 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186390 Malicious code in crust-thuban-archaeogenetics-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1d77d5878eb84187eaac9705aa2e1f130b0c1a6d7d56c13ff36950c3de33028 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186188 Malicious code in cluster-tool-quasarjet-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77d3dfb3f3920e3a072a4e1193a85adde9b2af5801f438ea99da4553b52e6154 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189722 Malicious code in subscription-interstellarmedium-toml-neuromorphic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94870bef41024d316470dd53ab7a4f20aa757f5e14a2b389f9389b45f02c0f32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186808 Malicious code in eridanus-hermes-mui-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2664398dc9b5987135c7f0b48309f9a0fe148b2e57829465f8e0fab3c3bbc987 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185484 Malicious code in antimatter-slidev-install-void (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f36ee67d3b0eff64d3bc613e4f77cf96c2ef826571257f8f7761c58e4faf537 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188415 Malicious code in omega-xml-proxy-runtime-analyze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f1524119b90af9dcc5c6e699058343b949f87d6eff954a1dbb9d5723ceadb43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190370 Malicious code in xenon-command-futurology-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 158f275577a92ca7d58cb9a4b4c7aa49ec6dbed8cde8af11359b407b295ce232 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186944 Malicious code in fast-catch-notify-epsilon-new (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8e665e17428eb9a4550981db373ed690badd515c6d5f0d9e0ad505bac2e5adf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...