MAL-2025-189188 Malicious code in repository-reveal-md-multiverse-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de52f7052500891977e9b92278627f7cabde231989ddf59ee96489c8f19bf65a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188475 Malicious code in orchestrate-web-simulate-float-abstract (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e887cb363f2d36fac61208da66a1487405a32acaac2726d3d9d5b062e2518323 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185906 Malicious code in brane-halley-solarnebula-stratosphere (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dbe993ab0d2060aad81f817e0d23ae578985071a1a988c2fa1c1cd10c224534 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190407 Malicious code in xo-koa-metalsmith-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bc93d08c628e258a21edbc1a71b39f0d152d7a6764acf3855fe0a3c44f76f60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mantle-private-mineralogy-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7a10c0e697099de5b3529186316ba2c99a82df570459a1161bb7f18e5ecc9f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188908 Malicious code in proxima-bootes-library-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd9f0955fb715756a243c13cdc75fae960ac6e5073430166849b2380a0a8aab4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185571 Malicious code in array-stack-awk-emulate-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdbce20584aeefc07bff020dc5a37a22ea8e793ba0d39fe8c09d4da1bee7eb03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189568 Malicious code in socket-file-analyze-encode-monitor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4e6b448f3a960d9b8a71578b4a0ae0f1f5e3c42b50d21e78227c05c6a139a7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187682 Malicious code in key-kernel-transpile-test-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a52a484d28ce1ebc6b67317bba20eae6af92f4599233593aaa92ff14e137a0f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189090 Malicious code in react-bootstrap-await-vortex-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfe2df41fe79aa7d62e4bc1574ba393debd5f95cf7b85fa3cba47c2287f69cc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189825 Malicious code in taurus-css-minimizer-webpack-plugin-ophiuchus-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f8ad6a47a997ae581afbb207779a8920a2efac4fcd400cab0db5924bf8227ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in postcss-mongodb-astrometry-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60d91bb98b69696c0d64838fcc70a1807cd0481ffb5d3b10c23c6c4e4737ae29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in query-regulus-bionics-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dab2ac9bbf76ae17ec6c45f2dead8e433092cceef588c319f4d72f40571f4219 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189288 Malicious code in route-proxy-alpha-export-monitor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82ed7ce7a196ba7ed5bc586cfdd287f1bcf2abf295da782560005753652fe5b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187145 Malicious code in genomics-biohacking-xanadu-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3db31ffe47d54cdaa5a7c3fc25c8f9613c3d1667e57a7e9a8b85bfbccb19d791 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190265 Malicious code in webdriver-manager-sociobiology-wezen-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f48d3c0fd20375f6fc9ae730c7410d98f76bba902c31d24ab749f3bd628ff98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188720 Malicious code in pipe-grid-byte-old-array (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 707c043a8df19e2deb325b85449d0ea39297d0bfab853cf484146aafbc444bd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189888 Malicious code in test-slides-bellatrix-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bba71d4110a671fcb6d0cda97d9dc561e75c7fb386b29b0f7f2867f6d222056b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186754 Malicious code in enif-wavefunction-phoebe-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5529fe0b8e93a9c6aca887f4acba242427e40e99e7c53ab28047e01d9aae23fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189590 Malicious code in solis-promise-janus-aurora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be3184b211abe21fa68abe734f23a5e3a2974e348839412724fd29abecabeb8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...