MAL-2025-188861 Malicious code in promise-jovian-cli-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce7920e2648fd98b014ba6e5691d3aaa8d488968c54a9a951d7f0f09354f62de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190059 Malicious code in unix-web-export-key-data (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d60838cb059ad234ae83460587017a2a0124557f3c34684256b7ffcf37b12d3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190119 Malicious code in ursa-weywot-ursa-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2af13a9ae5e40d4933f48125c84ec5c03162682d0da79c769bd6dbb8c3c3589d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188052 Malicious code in minify-kappa-proxy-kappa-tau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ffe6566fc5c2b06e8b71c81372166626f61185204af858dd2c9b8ef190fa287 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186601 Malicious code in dog-book-protected-scale-grid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50e2dfc946835cb804fbf4f49f9dca6adcc7592bdd9880a1b5fc2f3e866af4dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188259 Malicious code in new-promise-compress-compress-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3261b6dfc0b0b95954bd9bbb403103d9c6d365e8c535d3e69bcb60b537fdab7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190150 Malicious code in view-omicron-unix-compress-authorize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d86eb2e159a609113cfc2efc8435ff741a9e4a3d864ae507fe6a729dd0058b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188832 Malicious code in process-daemon-pipe-try-bundle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 316ddbb2ffbd1c43021a6c11d374e9f08b52489cfe301ca4161e0c5bb3169d93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189422 Malicious code in seismology-configstore-vuepress-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26424646d56af68a8890c1e7febcf12c53e4f2f2688c342789d899c5cd8b8d51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187013 Malicious code in forever-npm-sociobiology-cassini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31bb78e35d24b0fa1bfe7a8602f0e3fead824e43b871312d412e456b2f7329ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189119 Malicious code in refactor-file-sed-class-wind (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20c5eb868bd7654b174c4709e96039eb8842f7d6311d2899f566d23882c27941 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189913 Malicious code in thermosphere-node-sass-farout-seismology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afedec7a9c064479a8e2564724676591ba3d6387ea85cae80291cab11358ca4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186615 Malicious code in dotenv-parse-variables-astrobiology-readable-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 465b6023a0ca0bca6df82d4e7fea4d734021c77c8d00b4a7e90ddac9a6e59305 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185923 Malicious code in buffer-package-bionics-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1fd405157c2817e145d01f5a76694010a00124749169424ea157e463f04adb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187978 Malicious code in membrane-kuiperbelt-cluster-remark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2639962a1d823072dd4a426f9f130d9902d802d078ba51a039ff515114bcb742 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186976 Malicious code in file-sed-hash-xi-sed (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00d86519311520ca1a35df7f45ec5ff5bce54178c9eebfc1939026100ef211d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187683 Malicious code in key-notify-stack-water-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87ddef8cbb3df6b03d480fc9b842a397d7dc55f271ce04cedca24e2d5d1065b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188530 Malicious code in paleomagnetism-process-rigel-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 806c222b404c6835419bb2dc3e3292a0bfea544dc0e55b7579ef348d91329803 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185625 Malicious code in async-parse-compile-sanitize-quick (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67422c824f3aa72587863ab29b8cf8aeb46cd13d5f23bb7977637d0717d8e92f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189148 Malicious code in reject-finally-data-big-long (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6243870677db1940fb6836bc6f04d08fabc64edf94c4b49f0a5ea514944118c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...