MAL-2025-187404 Malicious code in hydra-regulus-wavefunction-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6a0feec94c7f2caf416d31bfddb17c067b095aa118051f9ba4b9b3b53c348af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186646 Malicious code in duplex-init-parcel-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac497f57073665d298fcc5fecb6ca9e77e45df4bf3dd82e143a292881ec22153 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188439 Malicious code in ophiuchus-dactyl-elara-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc5943127d4a9fb92d910209f17a3996f3b16a97de9f0a91e5392fe0e6350efe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189027 Malicious code in quasar-auth-spectron-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81b1482d2bf6658d5bcc9882f74a7373b76ea98f1c21807206b8b30c947721c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186368 Malicious code in cressida-indus-epimetheus-borealis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86889f7ce22f369521ce2fceeef29b4481464a118b534f7a620ce86b6d283dfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190409 Malicious code in xo-morgan-css-loader-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df18935c38976d8952bf589369f1a0e87fbdb16e09e484594e5e302fd8d55ee6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186106 Malicious code in chalk-supercluster-repository-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8308f3d7c65ad1b1cf899c50d43219245550c86abbd2cfe3f0fdc45785ecb881 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188655 Malicious code in phenomic-mesosphere-multiverse-paleoecology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d83855abd4fd98ba8b8aa8ed34c9927442c29ebcffdd6358a39de10ac4dba6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190473 Malicious code in zero-daemon-small-fire-pi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0a0456658b09d6abae40aec0e7b3864570435f2c3bc449f3470354d85bff0d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189599 Malicious code in spawn-rigel-petrology-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ceb3e16eff53632f7d133fa2fc43a037654145b89bf2a95cafcf672760818e57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189956 Malicious code in tool-nightmare-cryovolcano-cryptography (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a76c88215df8fdb3d155deb47358326c302d81107bace56723235b1944267551 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188357 Malicious code in nova-relay-cosmogenic-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56dbaefb01969fdf64e8ec7433f6d512ba321800652f1879c013d3f2c5099635 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188710 Malicious code in pino-pretty-yildun-express-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 269ed87702f42dc45182c4c396bd4001c18e108c66d5f61fd4f3ac96adeee437 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190387 Malicious code in xerxes-nuxtjs-enif-superposition (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a3df68c1dbb342fe2e72f7fab9e48410d45a2321d9e4454632ee3c0f2b8aeda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186732 Malicious code in enceladus-got-ultra-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32239f7dbc5399708cd1356919a8314d11782fff280d08afb68b2a936bd12671 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188558 Malicious code in parcel-non-blocking-bulma-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e29c535824f02cdf2ded03b6607107858174dfee16f23bccfe9006e08b3903b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187326 Malicious code in helmet-radiant-babel-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 917d34c5edb13f7f1a328cb3d85f53c5847464cdbbc48039cda029b4fdde352f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188263 Malicious code in nextjs-google-transport-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c44eb151cbcb09b201958c6f74871e720931d3f659375891dfd01e8250ce544 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186668 Malicious code in easy-cron-secure-thread-sanitize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6d9a4e75826baaad3bfb8184f3a94bbff375967fdd2b655b15a9b74959d6387 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189779 Malicious code in supervisor-cosmicsilence-kardashevscale-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9573fa09b793a27dc60d132b1c9ae19d3c0b44531783b2302554c24bfa8ed91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...