MAL-2025-188426 Malicious code in on-graviton-async-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90e9e217418751f17e867d92f560f0a7829cdbd6752bb5530d1d45989f389b07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188511 Malicious code in paleoclimatology-izar-coronalmassejection-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 756842e6db0bea1f94727208f84d51be02ae8c8974ce68bffbdf1c771231d633 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186578 Malicious code in development-outercore-neptune-singularitarianism (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3a9ad1dcbf47720dfdd87f637ee8939890ae4c1b9d6ad6d72da161239249d37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186912 Malicious code in exoplanetology-grus-mdx-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ea31ec52f889b7920874ca91182d58e0b0d8d1ab58207de68d3023a074c7896 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187943 Malicious code in materialize-framework-electron-builder-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2a40e282cec551d107ae4fd4f279bb9af587898b119a66cfbc3a478e8c8172b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186624 Malicious code in dotenv-safe-parsec-soap-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e893f8ea331585741d2e799fca6e6967bc3995df4fbfe523ae985a21231bd8c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190159 Malicious code in virgo-joviology-proxima-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65fb535baf3318b23fa0b62b4cd4c5683c8431b361755d1cb4e8290c76a46c59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189443 Malicious code in sequelize-eris-europa-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3eccbd4b1bb7d5335c4aaa91ebd9e32a321a8447290883e3cbf50f61a29cb747 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188949 Malicious code in publish-json-solis-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36b79bc427660fde7546adeb7b221fb798510e3dba9b23eee59882ced30ba256 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187490 Malicious code in inquirer-resonance-stratosphere-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8045888615086dcf573d963c334214b9b8cb76ab93a54114cae959a94c16ed66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187558 Malicious code in izar-string-command-neutronstar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dbcaeebf03806cb0ef5c609388515b241112b004e88e71aeee348b374f64a76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186326 Malicious code in corvus-vuepress-concurrently-elara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e1561f44e67d0868f2fc1f6fbfb73bab11cce44a263ac47614b49c690b618d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185888 Malicious code in bootstrap-forever-uranology-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2670113820a8f2a2c46158eeea3fbec418026540f0e9939b1e4f110363f9c9c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190052 Malicious code in umbriel-zenobia-sedna-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68b10880c1028577aca2324bcb02cb17d6dcafcf9da7aade9173f0cd6991bed7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188844 Malicious code in procyon-json-dynamo-neutrino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be2e07823e5cce346b257d22926e479c2d0a207460567f6726c84336674fe59f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186842 Malicious code in eslint-plugin-eslint-sails-membrane (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d9c8ddb23f24da56881beee4ee5fa6011c178ea702b512177758630c0ecfceb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188311 Malicious code in node-config-pulsar-buffer-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e8c0022a09dadf9f316bef3237889774793b25526950d9d077e09de84fbaa55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190129 Malicious code in user-route-fast-easy-sigma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7773dddcfb7d81f96523f754ca91e75c1bba334c0c58daaa3e4263791ac88bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187223 Malicious code in greatfilter-process-mutation-crust (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3971c42a927647f77a1da4f4193dc48dd00e19eefd701b7b76edfdcb982e05a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185673 Malicious code in authorize-float-signal-string-table (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c818eb168c17bd59b31cd9c9fd8fb24062591d2a7f46885d4ae24493b54d593 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...