MAL-2025-187736 Malicious code in leda-loopback-markdown-pdf-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72689640fd1bfbbd21c0574fe0c4447c9f2ee55a6e3143380a55a797f7f3c422 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189536 Malicious code in slidev-odin-charon-pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10a6f20651e71b9191c950fc2cbdba6720c98b9935f61ba97cc07e440604538e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185742 Malicious code in balance-char-byte-final-big (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 817e865ae1c8a984187cb4dbd722f2a15ab88822dc1ff846b8b0644a317fdc6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189540 Malicious code in slidev-scorpius-dotenv-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35a54165db7da361334553c966eb5152e75555cd344fc44c637a633e938c7a11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186271 Malicious code in concurrently-scripts-plutology-nightmare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19edea377b5bd205b1005922e9bdd267e862f64cc222d1ea9d74a16977f9db72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185572 Malicious code in array-upsilon-decrypt-container-object (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d6f1b2f78f3859c8fbba7480af773e3a640b776964115dd51de4ac13b754554 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186423 Malicious code in css-minimizer-webpack-plugin-phoebe-biogeochemistry-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7e88aea6bc6d5bdfac3ccf178293c7fd3391a33d7bd847a88e2bed3c2f2efc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188672 Malicious code in phoebe-holography-deimos-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f786ef6f1326d79ed74a82e68991e790daceb5da183862a7f8406b1c60880be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189555 Malicious code in soap-membrane-thermosphere-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 170ea9563c8b172d76653b10f5c52e414d07daad6ecf7e43ff3f1cb6a7feb60f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187094 Malicious code in gamma-stack-fire-async-abstract (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f1d97ad1a3cc0bd0dbedc611e5d76c0118414285c11bb85bb8c1144c145a667 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189795 Malicious code in table-report-book-quick-delta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e0965416c019bc00c90cf5d20dd6fdd44aab3835008f974b0a821bce7fdd611 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188170 Malicious code in nashira-betelgeuse-astrometry-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa2786725101eb80281d006fa25c4c0f3dbe25a6cc1a67c411ded90ab4425df5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189491 Malicious code in sigma-try-deserialize-slow-omega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa134277639263f6619b38cf6bbfcabf6eb3a6b0fcf40df08f3f58df3e53a0ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187965 Malicious code in meissa-avior-singularity-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56058434ea05e4b11404bc54a0e547c0c81bb85ca6ce5d07d2906dfdcad9beb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187178 Malicious code in global-centauri-jabbah-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e054df192acb5a503fc2b8fab8fe9e53bbb345b829640946de23c47d0fc60e7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190416 Malicious code in yakutsk-electron-nebula-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e3af3d47e9940bbcfdc5b9bcad2402c0f51883d757f2146466144665b36d363 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190415 Malicious code in yakutsk-blueshift-supervisor-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8265e7cc3ce2aa13db6c24fbe72eef89e0b1aebe54afa3c2299c0f4527b734f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187000 Malicious code in float-encrypt-awk-dog-export (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1c90aa27b8b2e55c0c6642bc683065f853ef3a1db966142393bd9fc8f637f11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189273 Malicious code in rollup-plugin-loglevel-archaeoastronomy-on (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ae1d18ecda3a4a15013d21d522f0598cfc55b2f622436d4550842dd4870a5d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189980 Malicious code in transpile-pi-cron-secure-double (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f79464e911dab89a693fca3631620c93984804f8b4a48f7c6061aadb4d7620a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...