MAL-2025-186245 Malicious code in commitlint-betelgeuse-yaml-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1334745017722dbf527ff416d1e9f97996036c5e8c403d3a34945f517279cfe4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187418 Malicious code in hyperion-terraforming-cli-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 139f22bb319881877ea250018776f20d2290205a8ea094dd1c1fc3e84dc1083a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189544 Malicious code in slow-promise-delta-root-view (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 978db9873fd5163d504d6dcef0b180a56a9a49e2c99ee402c0549f5d2eb165d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in passport-wasat-javascript-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee1995b86a42719390fb786ee154c612d1535a6ce9c7c97401e18f9ec57b8367 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188331 Malicious code in nodemon-css-loader-husky-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef0c6f6980a8e239fba86b499d7e58efed539940a9b4a001da5150da2f24d7b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186421 Malicious code in css-minimizer-webpack-plugin-hermes-spectron-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d8dd2b1b22f82ca3c1eb2d83c301404fb836de51f9c33128031bf6be4145a22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190390 Malicious code in xi-abstract-user-alert-parse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 727d75d95e94323f65152772d90e7d52b5035b21d824667592987d3bf9f9a023 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186733 Malicious code in enceladus-mdx-zenobia-blazar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99e2a80c789cff4acf26ba387580fde45a9aa60b2e20961dff463da98406a92d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186285 Malicious code in configstore-jabbah-koa-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ecdc7bac31e1fd7c689cf131784e942a76c149bf2d2cbf7658f9a38538e2a29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190335 Malicious code in winston-leda-mesosphere-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c55ac0c1e1677bbe795f58c9d6316ea72e59e3380904b89eeabd1a4e3609525 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187991 Malicious code in mesosphere-kinetic-ignite-tectonic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20b5b6d11a7de70ebf25c858d96c58eb3b08a382c9a7864827f96f9a791eed7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190223 Malicious code in warp-jwt-mongoose-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8401e65a080266a220375bbacfb5ac32aaee20af15f0f37929bdad4bf41c1b29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189033 Malicious code in quasar-promise-kaus-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 041ad73f1af79afd5f9b6ca0c4c7ba14072a32c0a2b16fd9c8af00d6bf033c50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189417 Malicious code in sedna-request-dysonswarm-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe1b03cec1c5daf993196232116f24865c643b035dc6a9255cf8d2656074c012 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190479 Malicious code in zeta-lambda-abstract-eta-secure (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b820d228c75228585ef00e24bee4183f5a0dff3ec86ddc4b9cc4727395b97ed5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189259 Malicious code in rocket-got-heka-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 778e69e1b6a1c981f67cb6ad0fce677345c087976404dfb27b70709dfe9619e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188741 Malicious code in playwright-asthenosphere-norma-cassini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 089629ba9b62dac98d9d30189cd349c71d46b60499c74e40ecffea71b6e22c9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189075 Malicious code in rain-final-bash-bad-resolve (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b36f7861b2c5a32da3cbd2d0cb30c946b3f8a373dcf16159ed8af05069eb8dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185596 Malicious code in astrochemistry-planckscale-levels-singularitarianism (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d09eaada391f12d930144df90244194a3d73586bebf0dca02fb04568762e1e1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187280 Malicious code in hapi-zenobia-superagent-geodynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13954284061f6dff2946a7a8ea7e292f2e0a5c843b31c80ea8709b8cb7d11028 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...