MAL-2025-187645 Malicious code in jwt-firebase-izar-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fefa055bc041a85bb3553177d9546eb4d5599e738c2a450136a9abab5d66370a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186723 Malicious code in emulate-private-alpha-decompress-view (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a73cd7def8995cb1c4f464021cd52d52ea06de08bba825ef6747549710d415d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188131 Malicious code in mu-dog-proxy-decode-unix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88cdfbf38d06291aae96e832f05b29f00cfd35589943f585837dc348ec6b1fce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187680 Malicious code in key-class-optimize-notify-fire (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d94bf43315a8c1c2893814e9659a334209b0e31030d5d9e792fbd92c4daf7c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190290 Malicious code in webpack-less-heliophysics-wavefunction (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e8987f4d7ce795a5f2186e61fa899436abfaff67309bdbbd27646c1723add64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190314 Malicious code in wezen-mutation-ora-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 785a2cd14109740cafff9a8e5b31c61ce4568134f9abfba94196cfe4cfa0d4d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186892 Malicious code in exec-supernova-soap-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bb068ed1abd4e7a69111575b8abab51e3d5ee314c006a1d5f8527a9da2f451a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186683 Malicious code in eigenstate-areology-deneb-parallax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49b8bfef5c3eda4a83b38cc5fe6975c46300f0d47842e14e6defff8018f0c2d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189205 Malicious code in resolvers-typeorm-dependencies-development (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5dd2a238d88c0adffe27656503d08c62254216af2d36d818b92df13f4db3c0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187736 Malicious code in leda-loopback-markdown-pdf-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72689640fd1bfbbd21c0574fe0c4447c9f2ee55a6e3143380a55a797f7f3c422 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187955 Malicious code in mdx-resonance-cryonics-geochemistry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7acea75af333e29d6693c967fecafdc79642a14bdd49af2ec3e0b2428ba053fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188372 Malicious code in nuxtjs-heka-google-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc5c65fb21b2b3d1ecc525d9eef20278307f1623df27345292cda8081c3ce4f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188101 Malicious code in module-palynology-kronos-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbbb0c80c490b51b1c0db117fe652f90324d49f399fb71d1be2c441edfa21254 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188166 Malicious code in nanotechnology-ariel-atlas-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 726ac8d50d2a6fb517f785829fa5c9a3f25bd010388eeaa6547b9f90cdc68a42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186226 Malicious code in comet-xanthus-cosmos-protoplanetarydisk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebd7eff7be8b46330bbcb8463a2125acee67c6092420bb38433fba66ef94e26d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187620 Malicious code in joviology-standard-iota-outercore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af8d63a4d4151f2d7abd0d0003f10cd383d8c15f82d151c121367037a69142a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187452 Malicious code in index-grid-unix-long-kappa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fd6010b07fa983c3e40a12dd19c6d425704d8d363446d1557f67e28cbcc8d3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187154 Malicious code in geoarchaeology-oberon-proteomics-xenon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4457df8bb683c248eb0726675b92eb63a0c31125a2f8c3dbdee0b1dae031dcfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189651 Malicious code in standard-seismology-sync-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bb0161e8e9100e0895c5f49e6260a519a05cbc55a4cb32eadbd60fe2619b257 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186242 Malicious code in commitizen-playwright-selenium-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c754c3bfd1ff8786771ed58cb3d42e85de78b7b2210d6d9979d54019bdb9ae60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...