MAL-2025-189387 Malicious code in scripts-hermes-pulsar-neuromorphic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c868f2b930f8cef33f4482af086921d64684fe465c818ac9af2b1f199e0a258 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147729 Malicious code in scripts-equinox-achernar-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75261065f0a6b02ca3e374fc44540af758f88fa9649ec332f7b2c9b4b226f83d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146737 Malicious code in proxima-scripts-wezen-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5276ed126e2063e64fb1b6332fed4302d4454bc508f04b29c7812df1983b202e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scripts-sadr-parcel-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39d4129ff9bff98bbff961f993a0ce01ca0fe2ec0098fc4f27ecfb22382b00c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116270 Malicious code in oktafian-lumpur45-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66024982217ef3ba8f7f527bcbe0969f91ad74d37493ac1e9fa01245a06deb20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-76564 Malicious code in zaki-gudeg82-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b6955507a1e9dcf495134075f3126c5f8d60f2586a26c05536f077d9b107e37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66658 Malicious code in administrative-black-swordfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01f1e4954bfa2700db10200c4386536e411a3aa9de21a23a49af95b93ab7a9d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-54414 Malicious code in putri-rendang50-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 061e4e5c079bee57ceabdd6292daab1e8b9d2824e0b3b26a8c12ecc87260662e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...