MAL-2025-187044 Malicious code in framework-bellatrix-await-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d9df861b47c98b33c486f725c68c2f4aa0a6bd786a502e39eb00f5c48648914 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187300 Malicious code in heka-antares-vulcan-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41c307536c58204cd3b17873413e4c2936eb8555c5cc85cafc399332a5578418 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190083 Malicious code in upgrade-dysonswarm-node-config-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cfb3957e784c8f64be9d84de653a91b11d80d6ffbf26fbc120b8b24133d2a07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189893 Malicious code in testcafe-canopus-graphql-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f4cfec36e2798cb46c6101c52a91328a2ffb0f2c3298b732437bea7f1e20372 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188190 Malicious code in nconf-gemini-webdriver-mocha-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7e8722c814d02682ad652c04b378d4dc3c4eb3d425cc1f427ccd04011bbea9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188677 Malicious code in phoebe-stop-mongoose-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e478404081fda9c06b6eed4328a43c5d28a9e605813d10a8317ecfca11a21aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186183 Malicious code in cluster-protected-resolve-cloud-refactor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16bf76a6aad62a8326f2acada064db0631acce7a0d63f70078133976b476da61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190359 Malicious code in xanthus-tectonic-levels-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d90865d557f01264ee242fb2dfeabb200ed169fc59c91f5f3edb8e2e08563342 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187373 Malicious code in html-webpack-plugin-deimos-toml-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bb045f13fdeba200e83090bae2409a07346335c9f563b24f275cd3404d87132 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185420 Malicious code in aldebaran-quantum-babel-steganography (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e432f722c7db5ff51f734dd2a1307f770c81673653a4f35fc65218ea770c1f77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186946 Malicious code in fast-stack-tau-execute-hash (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 137b84784289328d3b9ba7b56948392fa03badb0f041d479bfd6c1126377132f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188280 Malicious code in nightwatch-abiogenesis-semantic-release-supercluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c04dce162afc7d6c59dc05512d4f23f6779a6891e85414c6a52032e9fc0c2d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187200 Malicious code in got-loglevel-ceres-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b2e9f729f99ce1db8045e28e7e2b5344d4377dd1b1a8f21d8fe39d2c57b0dbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185513 Malicious code in aquarius-configstore-eclipse-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6f9c0bd3c72f560cf9b5c5224602c2ae201987ed09596ea70d1306211090c53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186063 Malicious code in centaurus-miranda-meteor-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f9dfde358d6a071c63d8cd5d8c57a54d7e60b2c7c26ccf05411518e4daeeb61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188439 Malicious code in ophiuchus-dactyl-elara-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc5943127d4a9fb92d910209f17a3996f3b16a97de9f0a91e5392fe0e6350efe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188652 Malicious code in phenomic-google-antares-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fff97e545d5e2e9db5b557728fa65896b848a234061eb2b80fabc1f5a3203d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189306 Malicious code in sadr-nodemon-cosmology-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fde5e4eff09a33f1389f7b207284fef123917e01d69344dae811a66121796ebe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189992 Malicious code in tree-function-kappa-decrypt-assert (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cacb380e1ce93ad7d45f252a5f9858b2a29a47775e53ec4c03d4779cadce49d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189956 Malicious code in tool-nightmare-cryovolcano-cryptography (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a76c88215df8fdb3d155deb47358326c302d81107bace56723235b1944267551 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...