MAL-2025-188201 Malicious code in nebula-deneb-winston-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0735a38c36f2def41b0e0f45a429e1d63bd1f07e44636f8161b6c11d78985b89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185853 Malicious code in blaze-figures-auth0-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 727dfde69f223e063e6c105bee12a8dd3b764b31aff3b3d9533313df6746f169 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188744 Malicious code in playwright-quasar-tachyon-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29e1811086e60f8c2705e4749e9f39094f5019189effbebfe1ef6a7c767217da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186845 Malicious code in eslint-plugin-husky-pavo-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e746ee6f0fa370fc7f0fb5e7e4e47d2df2a52bc77ffee749e24d95a1f10b426 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186451 Malicious code in cypress-technosignature-solarnebula-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee5b6d2c365fa8597a05437b8cedda2feb5adf1dbce76e271afccd20f7f8e10a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188928 Malicious code in proxy-process-rho-chi-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcbf9b30ea0fbcd0b34c3091843c49cea3a14ca9545d7b4ab2def8a21e698b4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189649 Malicious code in standard-parallax-chalk-hologram (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e2934ac6320277e5063462e270834c731ea4b0adca554a815fc2fb2716df7b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187477 Malicious code in init-optimize-css-assets-webpack-plugin-nodejs-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70dc2863be0d9933feb9f50a9c64d52707a31a7128d733acb26dcaf70e489128 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187761 Malicious code in less-pavo-restart-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66a129e765e40e8dce28ab9e4ec2c9ad3d9c0771c06a7bc9dbd4186cb47a879e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189579 Malicious code in socketio-polaris-restart-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e80f723fb0c38fbfaf0efdc1c70d08acd508343dbd594e403fca9751fb9b1719 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186667 Malicious code in earth-visualize-abstract-beta-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cdcb9e255cb40cbc9b3900e368a05edeb31be8f58530b34dcf7f168ad49aed6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-gnyagibhghygdyui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbea887ffa500e33cf0f11a4bffad3485306217c6eaf49d2c9de357ce74c2690 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubb-avigfagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25b7b65ab3af393482d0ecd44e8e5717f9e3d04b767e905c72ddb5346ff44291 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ift-digokmiuaiasnla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f80190fcbb42d9bba039bb68cde055bcc12354bf275f7ccf817a95af3684262f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-kinu-biocab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59140ae4aa86d17f03a9dde99e72787eef5cc883caecf6aaa2982ad68e0302be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-aiksgsdfo-ahksgaodan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ba0d175e55aea192ad19b9056b8b8012d132a0f9da3f51007c41e180773ace1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-if-dalimiankunak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd4e5714554d8606d52cb87fb11402c6ff6be45b951947d72f1a17085c6bf6eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modasv-kuu-bo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5abccd91c154d7a48a02562b3b40b3db648701bca8a3a359c19375339eaa6d75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-uinaga-auguf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16af38931dd6492a7318bc20ac168961864e8ae39dc5bfef3ed86624c7488cc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-gnyagibhghygdfhbfdydyhgui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7095bedacfb4d4c300592b3abfc4739809dbec65029a9677efc726cf7932ab29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...