MAL-2025-190158 Malicious code in virgo-framework-dependencies-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0409c65db6f8bd311bf6cb439379b2c52dc1f8fc0a7ab975a69106943fe4e47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190320 Malicious code in whitedwarf-selenology-jsonp-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b83a2580056cf6aa51868e0aaae0415ef996d229c5d8b9ab779a3fefa1ebfc67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186638 Malicious code in draco-cygnus-repository-aurora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd48d72c64c9fe1b6b0f79051ba805240b950b7b00b9f6379eaaa50d6ef54319 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186296 Malicious code in convict-miranda-deimos-astrochemistry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04db394617dbdeb6aa28e0264b9f8042468ed940bafb4b05d874fdda03d6aa6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185508 Malicious code in apollo-slides-duplex-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba8a0f7103bc28344b11048c487f65148e33abee3d3ff35337b6564cbb4ca14a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186352 Malicious code in cosmogenic-polaris-helios-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3e6d3451b4d5f0da4f77046ec49acbcbb8bd9dd42f04cc2a46ade4250da3b72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187631 Malicious code in jsonp-lacerta-eris-octans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4338b9067de467c48ebcb22a68da6ba8445e72cde9039197e552af0dcfce6e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188592 Malicious code in pegasus-cache-passport-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dfec8b52297551b8c72f8706ea4a3412254e3aef5804f3ecfcd835d4237b6bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185744 Malicious code in balance-dog-throw-balance-daemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8e2cf175dfcb256e4e04e8d82f344e971002226d736740c3e3050cf4aef44a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189098 Malicious code in readable-ophiuchus-markdownlint-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84f23c5a0ba600a532021dcbd3268280484ff7155d1db4a995258e9d23bca9b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188089 Malicious code in mocha-neptunology-flare-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6d37bf0614ce1300b08987292992ee91266002a191b2baf94fb221bc877a9b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185668 Malicious code in auth0-stratigraphy-ursa-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11a88a92b26c3c4dc2b4c25959fb6dad8e7465407b50ab1c45e96b9a750a3f00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186910 Malicious code in exoplanetology-command-heka-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c20460cd88ac33a5b0699bef0fdd2e695b306f22592c147b6451eb2336f28ada This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187572 Malicious code in janus-fomalhaut-rate-limiter-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cd3841be35626649aacb44b41b13db290ef1dc661070b516c2e4823083cedf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188420 Malicious code in omicron-query-air-cold-kappa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecf2ab953418ed4cb1f746b6fb3179574ad14d8670dc1414ab46934e8199dd06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189949 Malicious code in toml-protractor-spinner-inflation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81d222bb1a9411c20be96d3aed78769716a085e98dc4e62cd956f0cf3ce62615 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188680 Malicious code in phoebe-yildun-gravity-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88e7f8707aee62cb3960c90f21928bae1147bd91c27fe32db5fe802a976e89bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187424 Malicious code in ignite-chai-mira-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ce891d93375fc44ef940ba2e552f0edb96f80dd9d0738d90e22a7a411c2fb82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186594 Malicious code in docusaurus-hugo-uglify-js-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 531ed5c2326f78b5814abec79ccbc151334e3adf59676041d2a923ed645d6d1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189802 Malicious code in tailwindcss-bulma-vuetify-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1dae4b6617c23b94996978d683edd81cdfa0c3dea5d59e4276843468c90769a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...