MAL-2025-186093 Malicious code in chakra-ui-test-quark-astrophysics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f7da34d62a5c8298da9cb0398d30b6ec22a9f5f88682ffbbef975d1fdeff375 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187052 Malicious code in frontend-kuiperbelt-proteomics-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c314ade66b9a498126b2a83549889c2c81a192088d4ff4e9dd5b78d8bdd4068 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188726 Malicious code in pipe-simple-virtualize-void-stack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 926400f6a4cc531e4518e04fa52cd0abcc7786a74fdcfbe3009d4e7d91669f67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188102 Malicious code in module-phoebe-elara-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaed4d6cd51cce3751cac67771452d77bdb298f1addc82ad8820b92bceba07b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185968 Malicious code in cache-publish-decoherence-astroinformatics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f8c45af9f1f787eae1ffc6a38584c3e59ad89115ffe14aaaa705a8994e0708e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188089 Malicious code in mocha-neptunology-flare-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6d37bf0614ce1300b08987292992ee91266002a191b2baf94fb221bc877a9b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189457 Malicious code in server-asteroid-foundation-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bb40eeabda7ad4308a0ba204f8ac1fc138af675efd1d2031cba0b5d8e8d1279 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188047 Malicious code in mini-css-extract-plugin-meissa-chai-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f10f238dac0f01e63a9ce7a8c017e5600af3dee37d61959eac17ea52e027d019 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187835 Malicious code in local-astrobiology-magellan-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a2c2f4a1059031e0a45ea178d7af7eb11800fc2c6f6b0f385b866faf57316f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187608 Malicious code in jest-titan-postcss-loader-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a277d7a2ceb2b1f9af71797414949b7377311b1cbeadc87adacedba54221430 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186674 Malicious code in easy-pipe-signal-proxy-uglify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cced811f8b7d7d11ae1da05db78dd95c88ffed00ef920a419f7b559ae4c66c77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186037 Malicious code in catch-byte-decompress-cluster-assert (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cefad3485f3c39e57462bbb18e12e7d3afcdd9760292343a4878f2dbe8363fa9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186638 Malicious code in draco-cygnus-repository-aurora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd48d72c64c9fe1b6b0f79051ba805240b950b7b00b9f6379eaaa50d6ef54319 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gocay-uga-viguvuai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5240da5c0ad994a4d5c2555e6dcf9436b59f9b4c2a876b28abbb4a305304dbf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kin-afudsac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ea9d91341279465c66cd433abe5469713e1f3682b303c987158eee909cbe9bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kfi-cuwabiml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0e5f793e02229d3ccc8a8838959bea35fc2566a41b62ec575354b7fa554f39f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-acumnacffgteafsgredcadfavfehxafeabfac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 581da1f5c7a82897e8b6909326a0e405918f978d0638ac2caa84de710100997c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masolv-avlo-cobabsvov (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 054d6849ef0d6973da1d7421700ce87d5d14ec6e9eb83c55a4efd9f472c0b701 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fus-ugaiaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28a9f6d70ab7b3e0c896ff6731a012f86a3fdf2f00ae94dbd5073c4d284b9097 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-knu-bonijavfv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bb6b6d879ba69954e2baa5d58c7ec0e326481f633dc77e5406ad5d075b89ca8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...