MAL-2025-185889 Malicious code in bootstrap-fusion-loop-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ad929870f7e51b33e4727a05618a9c190591109bf47fc02313b51fdf7760115 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190021 Malicious code in typeorm-xanthus-solis-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bb5168a960f3e3d393108ebcfe184344358d5a5de8bd0ebd27903e2f4fc0ccc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187020 Malicious code in fork-object-protected-data-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d731ebcdace439a4ad52b59008be2f09ab2a515b808c75fbd971d22501b85805 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188307 Malicious code in node-config-lynx-cressida-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1a8390d9b4f7f0ca066259c5d2fb5a70e40e66cc7525724d3aadbfe0acf5fd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190264 Malicious code in webdriver-manager-parcel-innercore-redgiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2f785d53eb57cf7662b6f998c6b059fc8dab31a64d5eb9fe8f614df352667b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185772 Malicious code in bellatrix-prompts-webpack-paleobotany (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff60d248263ba8c994d0355354d6ac79aeda3be055d3bc9944a338d1820a86fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188457 Malicious code in optimize-report-pi-module-hash (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00eeae1ab2bbeca7c4cd632577cf6916c3401c525a645b193b91425590b719a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190098 Malicious code in uranology-blueshift-kuiperbelt-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f8b622cb4126beefdca25ac457fe921595528d6111b5622e46c5f315f278db4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187906 Malicious code in magellan-transport-auth0-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23426125e717f1b44108b99d6736b6aa3d30fef10c3edbf7df27eb9ac8c86fc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189651 Malicious code in standard-seismology-sync-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bb0161e8e9100e0895c5f49e6260a519a05cbc55a4cb32eadbd60fe2619b257 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190450 Malicious code in zenobia-google-readable-paleobotany (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 858f7b4211ddae783c9dca4669d04a3d883faa28e83cbba2ae5494bcb0977e12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190378 Malicious code in xenos-cladistics-dotenv-safe-joviology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae340cacc9fef88152d2d2f0ee248db87d240ed77d1746d6db2b10276738e0d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in altair-async-jabbah-radioastronomy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 164dc0d18e8436c9b9b2d28e91de04e69468ba9603a30d5512837f595892c8d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grus-superposition-pegasus-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dad58e646a9599b1bc74e3e52f19631059b4d22a2879e23b3516e4ff029e303d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slides-callisto-algol-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67b3bfe695362ca840a8b1d470ae420b7edfcf507830c21db35bdac8e60ba2f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in terser-webpack-plugin-rollup-plugin-cybernetics-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6b7843b7f7891a049059218853ee6c6a14322926fe06a83bd6cb691a16048b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in development-child-process-npm-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d30eba4265fb685fe49217880ad4f843dc9e946728f6ca2e2029e0d23fb573f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186230 Malicious code in command-celeste-resonance-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3b7daa0dd48aae2de3f1cc7c64f7fa3b63d95577226dcd56b70f089c12ed9b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190402 Malicious code in xo-castor-frontend-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 075c29e54a9911238abd8798bbb7fef42b22c93a5a8aa1a39d9fa0bf36cc7c7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189196 Malicious code in resolvers-forever-mongoose-multiverse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb698e9521d3e4b25725566a6542fa166e4dbf4f9e61de34e643fbe4eb435770 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...