MAL-2025-188565 Malicious code in parse-key-lambda-new-socket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35ed373476804d416dcd59b1c810994e717e5d31441177b19f2a9de08e8d2d8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189776 Malicious code in superposition-unuk-spectroscopy-borealis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 447a420e2f7492d5062a141b6b5f5bf8ca06267753ff8c144ff4da6937865934 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188624 Malicious code in perseus-geoarchaeology-husky-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bf0b6bfce5b812d86511042ff2d479088f8af8dd44c9845d780bf4d110c0a8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185417 Malicious code in aldebaran-markdownlint-phoebe-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d2eae2d4d24b716dcf27519ab4ec2afb1dff648a431341b81fc253327556c6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188710 Malicious code in pino-pretty-yildun-express-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 269ed87702f42dc45182c4c396bd4001c18e108c66d5f61fd4f3ac96adeee437 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187638 Malicious code in juno-saturnology-sass-loader-joviology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector beb54e9749d9d21998cf67910838ec70d40b9d045cee981abefd69fed26a290d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188313 Malicious code in node-optimize-table-alpha-final (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24f260e0fad0e2b704b1d9ca6562b1bf2b8263f6a59ef27a984a33fb7e91cb2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190142 Malicious code in version-dactyl-npm-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector feefba00e2caeb92217dc071b9a4fe68188e1dcb407e37e274f1d84a9eb05646 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190009 Malicious code in try-data-signal-cloud-report (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d49def6b1332bdc84897f7c299b32c7df0ec1130260ea17e9bf6f0969738691d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190026 Malicious code in uglify-js-leda-epigenetics-speleology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67586f8742dc103f40eb465d756f50d3098020003859de251acf521976caadff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185402 Malicious code in air-minify-load-secure-encode (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1af3ec54197cb7da3f25eb9bd335126dffc771d242e1a8159a7354d5522b5442 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189281 Malicious code in root-resolve-wind-stub-interface (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76745c37e2effb609da0372dbe196b1268ae5777b04442b99e59f3da1c499739 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187165 Malicious code in geodynamo-stop-hexo-markdown-pdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eca0a2915c66dd42a7b4e7dd744b1a10f4f2a0085b8213be501a8ef39cde5d35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186755 Malicious code in enif-zooarchaeology-jovian-extremophile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12bfde11491b202a9ef0e7d59f6c037b33c4a718db17f3028ae3c1c5a5ed5e0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189401 Malicious code in sed-promise-book-sun-lambda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 487591f91c88820f45d772a5bf89be52c050f84212384436653e93167d3682bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189360 Malicious code in saturnology-darkenergy-sadr-paleobotany (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab539e896af1b7f48ea627c96b9ffd7a622b3e04fd2e1e71d82e26080d7deadb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189437 Malicious code in selenology-zenobia-loglevel-prettier-stylelint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d2c2038273686ad4e4c976e60b166c18b1148952183ab5873e7216c6dc12c25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186590 Malicious code in docusaurus-bellatrix-xanthus-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9143eb20392a0d27e57a0b63580b6e7156c67a61046a2b92d7058da8fbc82db7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187455 Malicious code in index-wind-info-emulate-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2c7bc730d75017275a5990844599417b63dfb9b803b4e2864818d175504e0b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186123 Malicious code in char-hot-import-public-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 354febe792f16564c5bcc92ba3e4c54de0a806e5195e3c623a630ff0b9ebd844 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...