MAL-2025-189621 Malicious code in speleology-pipe-pino-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc12667834e75d07b49fcd90c909c4159cb87514b0d23ee6ae4ae93afb1756b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187364 Malicious code in holography-antares-enif-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc8649af4f582c4122138a6cc2191c5208ae130c40e0a81317dfb3433f22d4eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187454 Malicious code in index-short-java-phi-virtualize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40e263ba680a09fbfa7fa23f8bee80092a3b81959c15f1cd633d5a32f174fd41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189056 Malicious code in radiant-express-terser-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13f9521da351568b57666d90d27cd93da483825173809d96571f3dd28e990f35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188048 Malicious code in mini-css-extract-plugin-nova-titan-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ea7a868756de9bcc6a3ace304f91da8cc120146b8b0589d6581391a679daf16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186826 Malicious code in error-fast-class-visualize-new (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29ab6287114c993123a1c774b449f01bfe2dc45a5f5b310517d84dc224ebd170 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189428 Malicious code in selenium-avior-antimatter-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42db6c042c566e179df6a1d7dedd3a0cf140b367c1acfd4d03ed2f557fe89d41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188367 Malicious code in nucleosynthesis-backend-local-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12f0e575dd8081f33d306cedbbefbb2c089c82765433643badb89e418944ac93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188208 Malicious code in nebula-outercore-promise-lightyear (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66069e88859f70dd33e442af467828063afd118ead677224c580a78b092e7d93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185384 Malicious code in adonis-child-process-pegasus-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3209c8b1de00a411a153a4f8dbe6ad93c7dd53375702b75897914da7bd3baf36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187044 Malicious code in framework-bellatrix-await-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d9df861b47c98b33c486f725c68c2f4aa0a6bd786a502e39eb00f5c48648914 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187892 Malicious code in lyra-nebula-node-config-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71da1d08ee103264b969b081db8fc81219689df4fcc9605329c81bbdd888fe5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188081 Malicious code in miranda-nestjs-void-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d66857fc341cf9218638687621ff6217ffbe1ef435686797bd875fae2e6ee4ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187373 Malicious code in html-webpack-plugin-deimos-toml-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bb045f13fdeba200e83090bae2409a07346335c9f563b24f275cd3404d87132 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185420 Malicious code in aldebaran-quantum-babel-steganography (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e432f722c7db5ff51f734dd2a1307f770c81673653a4f35fc65218ea770c1f77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188242 Malicious code in neuromorphic-corvus-rate-limiter-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8d42f67b16998e8372cfb22e1d1e99a0b3b90dff290d898c756114a21cddb5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187524 Malicious code in io-publish-antd-outercore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cedc22f8cbf0d9e9183bba0c8556e601ef32acc19e25350db1825e97f8f54539 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189840 Malicious code in technosignature-taphonomy-pino-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cb950925743b43b318dc4f6962ce166fc091c100004eeb753fc231ed2ca9452 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188103 Malicious code in module-serialize-fire-bash-mu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a46ef2a5eeea574812f8195f6276a061db7134416045f32a5444ac99d064d53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185815 Malicious code in biohacking-membrane-json-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eeb527aa78665f5e5cc9a4e92a1b7eb37e1816710216afb380826349014866df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...