MAL-2025-190436 Malicious code in yonder-fermion-delphinus-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48a223ee5c8d9a9b9340940cb1272872310f67f7c36a8246d60fada7bee8d43f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187829 Malicious code in load-float-omega-char-mock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17628a270991d0081404bd4691644acbb3f67c10136dbda8720e9bb83da80434 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188448 Malicious code in optimize-cache-static-orchestrate-import (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa661ea8fe97761367e0b2fb10ac18b163380643bf7efa070ae42b2ab09d95a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186230 Malicious code in command-celeste-resonance-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3b7daa0dd48aae2de3f1cc7c64f7fa3b63d95577226dcd56b70f089c12ed9b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188514 Malicious code in paleoclimatology-nova-rollup-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02798c4c1a995a4759454c6aea2a564c68e1924207dd426345f7fed7eb2c815f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188099 Malicious code in module-data-secure-psi-double (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0588a47bb58349ff90bb5ef1641bd09c9dcc5edbce002d0762474874d097c635 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189354 Malicious code in sass-loader-fornax-passport-geoarchaeology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bfd62a356a0fe396589416121a7f7bc96b02b42ac69778ec8d6e9d3ba645016 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188183 Malicious code in native-quasar-middleware-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4925360eb023738a4b9a50e62ee394450cdd5775f18795b8fe6531ab3371729b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190463 Malicious code in zephyr-ganymede-fomalhaut-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 400d2c278a0302d618f65ae002e9c82387d30f08742bf4fd5af0b01c9082a40f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187283 Malicious code in hash-socket-slow-debug-interpret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7eb938e088242a057f495dc0624b819b9294c2ad57b502008354dd8cad5c61db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188957 Malicious code in publish-sadr-event-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 978e41ca2421c245f688460c9427d78104c89c3f1cb3c995b6129df54b03fe19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186625 Malicious code in dotenv-safe-pino-pretty-terser-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6e64067c125d9b3d36e5f8917125b76d88ebdb21d3b049d689376067d521878 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188043 Malicious code in middleware-nightwatch-virgo-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 309920e422f8c45448e8ad953d87a67403e5f63d780ef8df3dcda78f5405e9a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189899 Malicious code in testcafe-pegasus-neptune-remark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac5221cad7cd712e89acfbcde1dd98b932035fd9b6052bfe6f8122e1b304bb29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186665 Malicious code in earth-protected-gamma-test-star (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 607017a42bce9e56670763a33b409d170584375240403b448fd7b4741454f5f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190276 Malicious code in webdriver-mocha-tectonic-leda-antimatter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96d67a3e972f3e54d0491f59445975ced9290c471b9cc66cfb1b1de3200bb902 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187445 Malicious code in impulse-holography-grunt-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9c28c8183009a08a11188523afcf95bf4a90b317d6e72e29db3fb3800beef2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187218 Malicious code in gravity-taurus-superflare-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91698d43b1bf58166cfea0197f507fd9230c66eccc5a874a0d9a0c15151bffb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189806 Malicious code in taphonomy-phoebe-castor-terraforming (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46873e7112369098bff8350a1440a504a2cfa26a709a48971ac7beebbb5bdb2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185771 Malicious code in bellatrix-panspermia-websockets-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 915341c96b286908734e85176bd715f1dfd72315e39061cda0bc575fdeed03ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...