MAL-2025-190072 Malicious code in unuk-uglify-js-astrochemistry-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f57906ac6a4735bb92280c00660dfe0fcb082121021fc0d695fd942e50c6163c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186385 Malicious code in cross-env-package-rimraf-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59b7e5135953bf968f903061df1ef7829176346806c7e274868c5ef4f82dc597 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187647 Malicious code in jwt-mutation-dagda-octans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e2929db64171afec57703302466935401c6763c0dcb88032f7433c14889af5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190349 Malicious code in xanadu-ganymede-thuban-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee9f8b8c8bd97eb72abbfb618a0776afb1768b178f6a5f06ba703621965be9f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186625 Malicious code in dotenv-safe-pino-pretty-terser-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6e64067c125d9b3d36e5f8917125b76d88ebdb21d3b049d689376067d521878 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186136 Malicious code in chi-iota-decompress-sed-emulate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 722c23358617dc24a0bd39fe403d9db311fdb4a4fabf6270ff1fac62100a291d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190249 Malicious code in wavefunction-parallax-jovian-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 938e05e40ad6861d8df01b57009bd79edb9c666be6fa41d3d26d00852d06cb71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188598 Malicious code in pegasus-mui-dactyl-terser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a0679388624378e5407482bc78a5f6cf2643b9db492ccb69df51e7e6c4a27ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186983 Malicious code in finally-function-boolean-refactor-runtime (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ee4d596d3d5de9024b75ee7f595262969bb1f126b1d3cbf2688b216df11c2f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189806 Malicious code in taphonomy-phoebe-castor-terraforming (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46873e7112369098bff8350a1440a504a2cfa26a709a48971ac7beebbb5bdb2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190235 Malicious code in wasat-pulsar-exobiology-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e635e404118b2e59ba1075a23a30f95a3df3eb263ecfdadd9ab1f39c6019e89a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187044 Malicious code in framework-bellatrix-await-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d9df861b47c98b33c486f725c68c2f4aa0a6bd786a502e39eb00f5c48648914 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187041 Malicious code in foundation-rigel-pm2-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 775fd4bd5df4bff7878c3a9a5430e41c9a9cb298d7725b017a3cae2bbc74e668 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186575 Malicious code in development-dependencies-cybernetics-cryptography (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 394b529057f391623b292a4b60d7a51f780d22380dc2cdc5a4c2595970c8ba9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189120 Malicious code in refactor-private-table-finally-water (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e7fe350226f8e4b7671ddae6faacdaa25fcb6d3a536a3576ea5fb7a4c42e214 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186119 Malicious code in char-alert-abstract-decrypt-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f751a85d1082b7e437e365b50d7e9f5a5e775d31cb2f009ac1857bedf81086b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187773 Malicious code in library-babel-meteor-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a9e462c051102c828b4d50e3973255ce834bba491eed99cf30b6f877f08521f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186758 Malicious code in entanglement-greatfilter-void-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5c938a40aa714464f758cf9b7ffb6b9ac75e1e0bfdfb7fa0e1b292f499d3135 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190322 Malicious code in wind-char-function-resolve-enum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f350467942a4a8ea041da2a995b65503e5774b4faf4936634f965be557a5c4d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185355 Malicious code in abiogenesis-cli-tachyon-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3731d79580a9a1a452610b6a842f4635104e983316a54b1cf97ef46f6b025b4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...