MAL-2025-186159 Malicious code in class-eta-lambda-hash-root (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f715951a402718855a35a9591b873d900eda66c234eb1fc503ce3e337610fc3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185681 Malicious code in authorize-signal-report-omicron-decode (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48d8ba11d8a4a4607c7f53061d2de0abe671593a7676068b13d46e6f8fbbcc09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186278 Malicious code in config-ophiuchus-levels-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d00e2b33ecfe6efa1b745f3dc70eb10dfaf23b6cf9dd3ef2b8fa29f57ea8fd01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189205 Malicious code in resolvers-typeorm-dependencies-development (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5dd2a238d88c0adffe27656503d08c62254216af2d36d818b92df13f4db3c0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186574 Malicious code in development-cypress-nebula-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da745b9e11fa6ffe295744cf5037a33207878a84455b8a94772169f66e89c3f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187010 Malicious code in forever-cypress-public-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86d8f2b7403fb7a57f1c5c0016932bfade7e558ec54a15aa56686d6a7431ea8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188877 Malicious code in prosthetics-commitlint-astrobiology-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbfb4f7c503130fe491771b7258e74f8a9cad2cc0d49ebd7fa62fc8813bece12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188627 Malicious code in perseus-lyra-css-minimizer-webpack-plugin-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f7d3d9b81812427d006a9d83aedc8ab35ae99c772c8d05c7007ddb3d17c3f8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188609 Malicious code in pegasus-xo-charon-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 181224c30ecd7ac564d8ca1c19e9898a3d4893ef3135055451b9a6683c264f9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189537 Malicious code in slidev-parallax-epimetheus-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9648e5930b748de1f16364db1c8526b6da10543ce9ccd1179eef4cf83479a823 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188497 Malicious code in paleoanthropology-helios-auth-panspermia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e67ea5fb796d68a806e68066027f59e37e6980576eca3fca83fbc833334b5e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187613 Malicious code in jovian-postgres-webdriver-mocha-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ecf3fd1d508e4debb89f36a79eb6c7ac29572b4b9404eb582a72f90583c8daf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189394 Malicious code in secure-big-user-unix-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58302a7110a1c0f90f3bedc311dc5eeda947f3da8ac2e2e1dd37e19aa2b0347e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187473 Malicious code in ini-quito-stratosphere-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80addd4c113b2cc5947537311ac67c987723ef1ebcd79a98f25b63fe603be5e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189496 Malicious code in signal-star-benchmark-report-small (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0673039fa65b37bfe01eddec1af15894215ced0879b993d1568ac9ea76e07d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185647 Malicious code in augmentedreality-version-wavefunction-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2503586da8fb0802fa3367acc3e22e67b9d508d0ea7d14123f3ec4edda2e8203 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188531 Malicious code in paleomagnetism-public-quito-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa0117eff0240cadd090b3d5d9d0e72ff394d66fc694fbac4b77dc2cdd423769 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185650 Malicious code in auriga-parcel-soap-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbe5b1c35448ad73eef103c3a367ab3cbf211d6af7d8138c9531cad4d079c357 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187349 Malicious code in hermes-websockets-arcturus-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a36606ac1ad475e7549406f6d7bf78dea41167443315514434ec7399172a4d26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186885 Malicious code in exec-antimatter-jovian-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 081e854fbceefba63e765f5c1e12b63030ea5aa297f5d9ba7bbe5e1ce7be5c96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...