MAL-2025-186456 Malicious code in cz-conventional-changelog-selenium-xanadu-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cf8b961eeba9da8ef4f127b78faa308dd817dfdaa64410081587bb7108e7317 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190125 Malicious code in user-lambda-decompress-benchmark-omega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df1bdd5516102d254db4d781c94a6b7a174eb937188ea61c00e3590d7c38cbcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188120 Malicious code in moon-old-gamma-deploy-cloud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b5c4869ddd3ada1d30aaaa35c240e8d99748ce6917156ee14dd323fe2ec849a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186199 Malicious code in cold-hot-beta-log-daemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9a7f8a4e041fa30770c77c28ed0ed77e8a0b512d546aac9d12dff4a25c02072 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185666 Malicious code in auth0-scripts-slides-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bae3dd049724262a8f2ef9d0819f09a1d834c89820f442c9d3f8332a4b2806f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188995 Malicious code in quantum-computing-eslint-plugin-zephyr-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e88f3f76a14f5bc81391f34d6452a089594d0603cf85c69cdd178397bc3c36c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186091 Malicious code in chakra-ui-sadr-yaml-less-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a073ff2d6f60d319212474b26295e2faeab06927317a907039f5600ac134ae0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186711 Malicious code in elektra-yakutsk-cosmicray-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64e053063556b6ad51aaa35357c867ca4d8fbfbd2c51ef10bbd60a53ea1b3916 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189474 Malicious code in shelljs-fermiparadox-bootes-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8199a85992f315d21ea68c13b0beedab66d67bf10eae645fc8bdbc5cca7e9cca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186644 Malicious code in duplex-airbnb-canopus-gammarayburst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 117508a86020268cd81fdae9e80b61bddc41f161e6fbf280a81788e22e70634f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187228 Malicious code in grep-emulate-module-assert-chi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c75466ab2e6d7a0911b9994ce70e2bfe94d442f610e416ddf1214d0dbe6ead6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186026 Malicious code in castor-warp-asthenosphere-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35d58ff15ea2ebbd7c4324613137ba93e2574de45eda32618575677a0d8de300 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189796 Malicious code in table-rho-deserialize-authorize-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 676733ffec7a87fb7924febd613837bf69e942ad15ee542b5df5d85fe0246fcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190252 Malicious code in wavefunction-prompts-webdriver-mocha-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9133d1deb74b2792ed8706555c49fa13ce1ca719f838438eaefd5622916c5386 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189379 Malicious code in scorpius-elara-membrane-brane (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb39ffa44da48ee1378a4026bab1577b895a9547b6f4fd79847539f08e9ed685 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185619 Malicious code in async-graviton-webdriverio-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adbeaeed465424e52a3a1c461e253d7aa23522c4d71e215bf651ce7fc5cf5a79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185746 Malicious code in balance-quick-throw-bash-scale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0add969aba29a3927363cccce51320086be073ea29a996c0087d9ab4119c23d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188888 Malicious code in protected-thread-cron-integer-alpha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a8a54f3515cbdff294501d3b30177d1f4b221d5540a7178e1efc0fbbdc57b0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189341 Malicious code in sandbox-long-compress-book-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ee676fdf4a328f91380e094f39eeda1184a866c32f09c81103c42cf748fb558 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190005 Malicious code in troposphere-elektra-supernova-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fafea2be1de7264163adeab8c2f4d88c984fdf472b377385bfec282df6b6a8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...