MAL-2025-187021 Malicious code in fork-omicron-socket-easy-array (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09dec83f01fe45716ab73eaf8f7a24f32dbc73e07c2b87df02a03f006c0a81c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189522 Malicious code in sirius-robotics-loopback-cosmicray (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38eb13f98b3458601a765f9efbca06c33a9e1a9086540f8ca1f2940d44a09139 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187244 Malicious code in grus-nodemon-rehype-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6d559410a1d7d46410b0043f04df13062a94d3ab8a1f955226d05167489046f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185566 Malicious code in array-benchmark-socket-dog-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b4891ee261ab5b0892b7fb36fbaf17e875b3fb4eff45655048e9333c041a850 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190175 Malicious code in visualize-visualize-test-assert-monitor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df5ab78006cdd65094c4ee5d2bf6024ef771c9df5f97b6726c6840a65bb25c15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187912 Malicious code in magnetar-thermosphere-nconf-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb3bf2c4086422c764867c661ecf141e5cc312b3f3356cf4be94e25ab2554769 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188669 Malicious code in phoebe-coronalmassejection-lightyear-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6110a859ba92c977665dd5d85d570cab3c612cfcc08897e35dec24f6e6bdbf77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188348 Malicious code in notify-simple-theta-monitor-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b423312ee55eae4b343bff813661d5a36f603668689ee6635047c8f5c07cf34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187481 Malicious code in init-venus-sync-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41b6e40d812a9363fa5f719d89f8033b005cc387fbeadb50dac11ca6fcd9ba44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189090 Malicious code in react-bootstrap-await-vortex-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfe2df41fe79aa7d62e4bc1574ba393debd5f95cf7b85fa3cba47c2287f69cc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186498 Malicious code in debug-user-pipe-sun-simple (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b956520dade516641ac3e4bf6e4c17f3370f200481d4157d05f06f415cd0915 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188929 Malicious code in proxy-rain-decode-xi-error (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 004b97a2bfef2272a65920db91bb9ccb657976da59d63e4a71c0f18ea642a87a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185555 Malicious code in areology-express-kuiperbelt-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 819117857c155692c2a0d41639c5739a13f2e44777fa96cca650d2b82880800a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190393 Malicious code in xi-moon-star-fire-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 362014d5ddaa5609b560cef0f3912766ea90c9f16f84a1fd7f3d1750deb77951 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187593 Malicious code in java-simple-void-fork-sudo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a431fd38fe81d86e10d39de2b0de5f9e1d478535958d3b4f6dd4350bb47db014 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185978 Malicious code in callback-parallax-slides-metabolomics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d8e97f8094f87a6979742f141b60d354237a41ff9eb015264c2ebe8d9de2bb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188798 Malicious code in prettier-meteor-mineralogy-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7db2695a262bc6e69c6034c20bc2c7d9eff61f2b332c8b08bb2467def0f247e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190173 Malicious code in visualize-object-xml-long-sigma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2adad1da1eb5a45ee27e59a75a9b902cf303eabc80616c3b102fbddc15b14ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186955 Malicious code in fermiparadox-mini-css-extract-plugin-andromeda-mongodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acec897341872c6625b66acfcbdd4fa40c13d1f36c0542622e28f823bffeaa48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190165 Malicious code in virtualreality-algol-loglevel-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6afa3c2fb3a388e8347fc64e1d8b54a9008e945b4aae230bb4486ce7eec8345 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...