MAL-2025-188838 Malicious code in process-simulate-parse-integer-wind (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6f595e875d8be76b910f8b5812d7c40c89b52395acb636de9b3c68cd19dc6f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188179 Malicious code in native-gacrux-antares-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb581562590879071b9edffbb930548ea09b003f0c607354deac206ded34fcbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186143 Malicious code in child-process-concurrently-chakra-ui-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66acf8a52ab5f47e31e87daa88e9ccc679f3580c46543cd05ee50741b3f97448 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188232 Malicious code in neptune-vega-slides-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25682a3ed251ba5db9bb43d5f80a93426e070844ca49a329dde44e797627c644 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188768 Malicious code in polaris-solarnebula-equinox-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a261fd070997dabf0e260145bdf3863f5c5582929fc045bc5e59305fde4782d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187878 Malicious code in luna-local-optimize-css-assets-webpack-plugin-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e847d8f1a4f1accf31e663a3733141c1756c144a9aecf4cbdaf064c7371b951 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186611 Malicious code in dorado-spectron-webdriver-spectron-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d89c14e7aa074c70529c5ea2e78d695c2f8741dc72356cc92dcc4df097c7884 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185622 Malicious code in async-iota-pavo-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c1b1f4251a47dc183f09a26f155bd0931ec87d8606fb9177ab5ad1f58112403 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185513 Malicious code in aquarius-configstore-eclipse-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6f9c0bd3c72f560cf9b5c5224602c2ae201987ed09596ea70d1306211090c53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186946 Malicious code in fast-stack-tau-execute-hash (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 137b84784289328d3b9ba7b56948392fa03badb0f041d479bfd6c1126377132f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189893 Malicious code in testcafe-canopus-graphql-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f4cfec36e2798cb46c6101c52a91328a2ffb0f2c3298b732437bea7f1e20372 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188652 Malicious code in phenomic-google-antares-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fff97e545d5e2e9db5b557728fa65896b848a234061eb2b80fabc1f5a3203d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187390 Malicious code in husky-build-toml-troposphere (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00b004e07d0723764bfb0cbb6eb143a7cfbe71535a13c106188bd71e867b1013 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190101 Malicious code in uranology-sagitta-cors-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d259b39ce436f6936ead7f53ccab2ac0cf8b65ea6395c27e67242eac3d8cfb7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190092 Malicious code in upsilon-fast-epsilon-optimize-interface (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d653fcaa0c2e1a74b8bf8126b95ed3b9284be21d307f766a0df8c77a468db28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188411 Malicious code in omega-big-zero-export-java (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6452494d4a91b262c8f8c973f098395e47d3fd525719d07e2c95a4915fae749b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188341 Malicious code in norma-public-grus-supercluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d707947704d8dc980f2972ded93615029de1eb73f432f2ddb7854bc91653c4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188729 Malicious code in planckscale-augmentedreality-relay-planckscale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5f998a78e0845bead33d6caedda7cd51aea9b95c228d8eccca9940a5fbfef87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186557 Malicious code in dependencies-taurus-dotenv-safe-ora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb5b2595b005439f28ca60b17c903b163cc631d10b922571145380eb57a965b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189956 Malicious code in tool-nightmare-cryovolcano-cryptography (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a76c88215df8fdb3d155deb47358326c302d81107bace56723235b1944267551 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...