MAL-2025-189493 Malicious code in signal-array-report-reject-cat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 283289da6de504f9b10af44c8d89bd41e470b54cea7f1ef22be005087825de2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190186 Malicious code in vortex-enceladus-slides-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 459c37c88702ede938d6aefee367e7cab529ff9cff4c09b2c9bd4ea0e63730fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in command-celeste-resonance-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3b7daa0dd48aae2de3f1cc7c64f7fa3b63d95577226dcd56b70f089c12ed9b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mdx-zenobia-altair-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a4aacf4eaaadb9bc25062197eb2c1c852cdbbeff87ba8577ac4680b6deda5b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in link-cron-simulate-assert-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e256837491141edc7c92e5b82e6fc342f0f94ba27253023fe34abb8a251812cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189464 Malicious code in server-nestjs-selenium-cassini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8a760dd4bce11efdd666ee3f24ade2e0fc29cedb52383bb55dab1cfa53cbcfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186319 Malicious code in cors-standard-epimetheus-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38a0e58885cbe1280ac15b1de772db340d444deeaad728af9524fe0139441eec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188213 Malicious code in neptune-betelgeuse-halley-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0d3a2b6835a2e2cd78eb315d5e4b82e68d0bcb3840274c62bda761b9496ffe3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187050 Malicious code in framework-writable-dotenv-parse-variables-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a47bd46b4ef5b2101952c40324d79249e25d9c3a1b697d350ff8724c4e24387 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187523 Malicious code in io-octans-taurus-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d08a561f7cad6fc8181a710ccbe3dc3c4893aba23442b6399408165dc7bee9f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185917 Malicious code in browserify-sedna-apollo-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9274311e3df04e5c51c1bd2fd4419846f61128c31217b919fde8910c9c1e8e08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187997 Malicious code in meta-code-debug-key-old (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c44349ff42d4f48dca55e6eede52c18fd580f1050b7cfe7ef57d36b8602a3fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187222 Malicious code in greatfilter-nova-morgan-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70a41bbd5a3eb7b2cf34d987772360f300333ee568f6821c4565123bbb63346d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186514 Malicious code in deimos-concurrently-outercore-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ffa621761675fd2e3ec7b468f01d71eee4ac950beb2e51f7e89d5533a0a6b4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185939 Malicious code in bundle-alert-runtime-private-bundle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62c8caa3aa8ccfe49e936067aefe3ab052ff9b38de21448ed8dd888dcfa7bea7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186103 Malicious code in chalk-soap-eris-mini-css-extract-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9dfb806249dbb13adc7a707fc35469c24fed0c44496bb851f9c5dfff3945dee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188531 Malicious code in paleomagnetism-public-quito-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa0117eff0240cadd090b3d5d9d0e72ff394d66fc694fbac4b77dc2cdd423769 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190482 Malicious code in zeta-transpile-encode-pi-table (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 372db48429838467fa0be86a5ed9950434fe7964c97d1b228a5e6ba64fc23ce6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186885 Malicious code in exec-antimatter-jovian-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 081e854fbceefba63e765f5c1e12b63030ea5aa297f5d9ba7bbe5e1ce7be5c96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186701 Malicious code in electron-builder-pipe-markdownlint-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa590854af1589f753368b9047a4503bc64b6412f3131f3d2bd13cf72a2f6e26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...