MAL-2025-186889 Malicious code in exec-mira-puppeteer-warp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0de5d3575e186cbf2ae9d26ac63915739b790bf0fb98bb1ae5db1afc0e3336da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187685 Malicious code in key-refactor-finally-optimize-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d884c51afdb274f51556f45b4b1a3cd67fc75bce3d5f03fea59a2f25352a3e11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187382 Malicious code in hugo-build-configstore-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9153c124f5d5e6316c12ad12d229ee3d86fb12c8b46821aa50e1b4c2d6c78a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188078 Malicious code in miranda-markdown-pdf-rate-limiter-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e691ac26ae0b92394354fcda674316914c8f0464d09a7681898100fb4da7308 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186262 Malicious code in compress-async-rho-boolean-assert (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b47a72962d3c729d5d4253ec9d28d30df0480c577add110900f74126b32e3a6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189214 Malicious code in rest-oortcloud-interstellarmedium-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f490d6f037ba5aba42fdaf960b0d8bbe6e55f94782153789b5b8d489e6eca4cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186269 Malicious code in concurrently-janus-equinox-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f6d6ef13b489bbc8b7a52e41f3e53262e31a84c11cdd68253db993d9a2fd26a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188047 Malicious code in mini-css-extract-plugin-meissa-chai-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f10f238dac0f01e63a9ce7a8c017e5600af3dee37d61959eac17ea52e027d019 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186741 Malicious code in encode-route-deserialize-eta-export (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4849f20d06c8c3eb71f943fcebe44c6e682e2c94299b7465ea7d58fde0889c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186775 Malicious code in envconfig-protoplanetarydisk-dotenv-safe-isostasy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2892eb4fc40461d42c2bec88298e5cba9f2060177b8aa42e3bcf5b4584a481e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186136 Malicious code in chi-iota-decompress-sed-emulate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 722c23358617dc24a0bd39fe403d9db311fdb4a4fabf6270ff1fac62100a291d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185745 Malicious code in balance-public-new-object-nu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e4bc6026cbccdbd46d399f7ad4ad79e78e3f51369f9d5a0619d82b3a0f75f5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188709 Malicious code in pino-pretty-technosignature-biomimicry-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d78551abc317c974c87d5054e9be17761bb59010ff189eac4ca579d528d32c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187303 Malicious code in heka-buffer-install-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d173a46b2222709ebde51168c15d95d657b1e4e9bdebe6edb1073438c8838fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185584 Malicious code in astro-cors-pulsar-neutrino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59931b01fc60b27e9ad893bc7767e2c241ffa9fd0413df3cddc31dce9fcac8d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185856 Malicious code in blitz-eslint-plugin-csrf-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff0d2f8d4c99e5664b2a7e748d026eec2b2ed66b1fae1d4a24a9af5dabf2fdae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185898 Malicious code in borealis-rigel-string-exoplanetology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35f2dbdab2e1ba4e40caa517bb65a8334df15b1ced872d929a3e379178347ad6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188664 Malicious code in phi-shell-old-old-pi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddbf8b98f48373b31cbb5f1e89f4a12dbe3f2261af644871c9045b89528e7622 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186130 Malicious code in chariklo-sirius-relay-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36395446d117db20dfc560238e298b2ec80005ef394f3218019c4bc3463d8854 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189206 Malicious code in resonance-centaurus-luna-interstellarmedium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b55a8961749983bfb7cb0c1300d7c6479a6095c246495c0d96e0c71645daf08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...