MAL-2025-189496 Malicious code in signal-star-benchmark-report-small (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0673039fa65b37bfe01eddec1af15894215ced0879b993d1568ac9ea76e07d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190188 Malicious code in vuepress-apollo-kuiperbelt-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d4173383d800b1607f50cc0cf3319b90bfd620b0d00175aab6683c57b5f9471 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188241 Malicious code in nestjs-postcss-loader-slides-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 136d6caff4f79bd4c2162390fa99edba8f8844e4ae965bc0081adee88785b282 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186175 Malicious code in cloud-user-static-promise-stub (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d787f6189bc96274381f7572cc6423c6e4d61f53808ec5322dafced3748a3f0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189099 Malicious code in redgiant-callisto-altair-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c52623704e8e59183b20b689afbfb07d866c14348d1b2354d955944d41d54d68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188651 Malicious code in phenomic-gemini-adonis-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70e473e63486e2e3fb28b1c74b916ee10e38ac8e36cf418dc8213946bf8a4a0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185509 Malicious code in apollo-spinner-solis-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d92bc8e061659af9912ea6207249e0e7d6993cab9fd076885c4a2971c386498 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185662 Malicious code in auth0-andromeda-heka-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68c39f6cf6525f4014662ebdc8b1f003fa6c12eb9f5603ce6f8bb3d80ff05d4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185861 Malicious code in blueshift-canopus-leda-higgs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acab6813500f1c597e99e272e6a1c42d0a8644848cf3655935402a4123ebc4a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190173 Malicious code in visualize-object-xml-long-sigma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2adad1da1eb5a45ee27e59a75a9b902cf303eabc80616c3b102fbddc15b14ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189660 Malicious code in static-public-omega-abstract-upsilon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82ac38dd4021854b3cd24d798c971942b5a8610691c7b1bc524209f69ea59fe3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185869 Malicious code in book-boolean-runtime-grep-root (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 248fd29ebd39c973c6e898d5026a9cbcb91abf2a85b678c558d7b07f266a7c2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185872 Malicious code in book-earth-runtime-delta-chi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ca56a31956e75b2290ebd4b408475ebe5dddc60d039e85ec0ad1fb35dc980f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189705 Malicious code in stub-scale-alpha-epsilon-optimize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b75f8b4a809808568e4e6cb14303729e4dae23ba42ce8fca5522267fd3e6f2a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186212 Malicious code in comet-auth-html-webpack-plugin-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f5b037c3a10e0eb5d63054a411dd6a2daeb791121c669593b5602687a52454b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186875 Malicious code in event-bootes-dotenv-parse-variables-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ae4e0c7b9d2e48b442477e4c3c2f2a64252e4a63f95a4e5c549a3e8047be585 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187907 Malicious code in magellan-vega-phoenix-hydrogeology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f2f66ecbac6b74c3a512bcdb85aaa1cb1f53a2ff5ad66a411a8b5dcfd3d8bd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188353 Malicious code in nova-ini-greatfilter-hawkingradiation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f0ed4677af6ac562f86141705e1fc862963aeae5e02789ae1615b8b8ebbb1cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187435 Malicious code in import-float-omega-user-eta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68b9d72ef4a5adf2927a1577844ade2d0903be998fe38061cbfa62e1633027df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189696 Malicious code in string-epimetheus-neptunology-vulcan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87799b6ccfec3c2366bd5ed81d245b37d7001448ecfa937c6f2af98929640806 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...