MAL-2025-187824 Malicious code in lithosphere-markdown-pdf-winston-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc6fbfe227af2797cf89ea184596ed69bc80870c57f08a1e421accae594ddd57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187797 Malicious code in link-theta-float-class-balance (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0217fbc8ce82958f98e07fb84597a7fb29c01d324de938f4aca90bcef15b747a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185618 Malicious code in async-eta-try-balance-java (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d16ce88a7db07011ebd02f6deb6abe9ec27e30f28d503c3580ab35c829a94c70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185881 Malicious code in boolean-zeta-fire-omega-lambda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2cb7f8a6641e0545bddde60dbe3e670dbd50d4ad1135e2b340018411b59be59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189891 Malicious code in test-theta-old-yaml-eta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3105bd46bc3bf37e1426594d233e6aaccf8654317b65946cf727eac0782e7db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189769 Malicious code in supernova-saturnology-asteroid-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7937459b0c7fbf26e6ce76e53b247007a9cc5cd25f0a634fc670aa4fe393be64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189055 Malicious code in radiant-express-sync-tachyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc11ed6a8c3867ed71199224db53e25c2338a7f38da642038050bbef32d06101 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187931 Malicious code in markdown-pdf-boson-magnetosphere-paleontology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c38c10cbcebe8560cdc3182baf4edfab1ae95d08ad3c9ddffdae25d5e72a4206 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186599 Malicious code in docusaurus-titan-betelgeuse-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8f779285f8402967a51b4a701f70d23e5043abce71d017845f6f5674fef4929 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188642 Malicious code in perturbation-nextjs-singularity-gravitationalwave (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b165730c41881b44c233e780d2b9bde16b2fa49b0f012d8c28a06092c15347d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186448 Malicious code in cypress-geckodriver-vulcan-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a8e7b3c4e75f8542f11b8a92dfb8c43d2878628b0adecc1a5af688a49451c60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187054 Malicious code in function-assert-orchestrate-theta-cloud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ced639df901c0d1de13cbfbcff06848335dd6fd1617517443157c3e3ee78e72c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186269 Malicious code in concurrently-janus-equinox-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f6d6ef13b489bbc8b7a52e41f3e53262e31a84c11cdd68253db993d9a2fd26a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186622 Malicious code in dotenv-safe-nodemon-ariel-petrology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0dd10bc2cfa24ccde592a913acc6858967290e29bf81dfa4d634d6c08921764 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187122 Malicious code in gatsby-fornax-nuxtjs-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17493a8c27f8742691d5fb50ff801a6a531114bb0524fe9605d6af16d32780de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189146 Malicious code in reject-await-hash-try-try (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 623d2820b9969642342638ffdc496c9ef3853f209f297e48f6c68e39d9ce22e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188413 Malicious code in omega-string-view-double-warn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da844f5894c542a0d1cf7cd454e4368a4f85e5c9fcf2b60c0a06e16e1a40fa0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187283 Malicious code in hash-socket-slow-debug-interpret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7eb938e088242a057f495dc0624b819b9294c2ad57b502008354dd8cad5c61db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189159 Malicious code in relay-xanadu-playwright-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f5b343566d9c2b440cb6c55468fbad158ae781470ddb8529d7f26d72f7a9e78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186790 Malicious code in epsilon-class-cluster-root-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 803cee7f39b9a2ab6058d1cd3ae867eab62842ca33d4e97cb5e92576816dc45e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...