MAL-2025-188686 Malicious code in photon-airbnb-virgo-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b57c86807e608c5b48c721b687275aad0c86c57fac80d36be0425e26e2fd6085 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190487 Malicious code in zooarchaeology-install-aether-extremophile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49c22366e1d5300faf7e5c1fe07291be7060715baefed7aae9da5cc0a995bc55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185748 Malicious code in barnard-octans-development-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b647de4d84c8d74ffa98204aa954f76d7683d1129a058a4e5dfe7bdd5cf622ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189568 Malicious code in socket-file-analyze-encode-monitor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4e6b448f3a960d9b8a71578b4a0ae0f1f5e3c42b50d21e78227c05c6a139a7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175450

Malicious code in yaml-iota-jasmine-norma npm...

EUVD-2025-177447

Malicious code in ophiuchus-bootstrap-perseus-airbnb npm...

MAL-2025-189703 Malicious code in stub-encode-object-meta-info (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 643f68a0d1cbda23598ad13b11868420039b0e0564897059499ad00fadb8354b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186288 Malicious code in configstore-quark-sync-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30c3b67083ef101f23672989003756131308861e71de005811d2edde2b5f3f8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185731 Malicious code in bad-eta-encrypt-error-signal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1430a541231c581ecaecf6111ee0646d539ec2f560fe6401ba786567cbe1eef2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186419 Malicious code in css-minimizer-webpack-plugin-firebase-corvus-supernova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b02a5aa11d22cf97489823152a632b2494558466c81b352b58380b9d679dd3aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188363 Malicious code in npm-publish-cross-env-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f326fe849575cb4d47994a975a7fe829719b21959ffb49ef1ac24126a1519ae8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187232 Malicious code in grid-mu-cloud-signal-cat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cdea576c0cd2686520489649051a2de7c88148b728550acd1d2f5516422c9f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187776 Malicious code in library-capella-tectonic-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aad6929a0d0d976d5d901ed69745f745aa60c1112cc89324dcf4401cade4b817 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187503 Malicious code in integer-pipe-beta-orchestrate-simulate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e55447a68009d0b9b6fa757453f8b249946f97b92a5891a39a495e91cec4d3a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186147 Malicious code in child-process-xenon-avior-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9f4f073cd819427d81027c4347194f2093797d2605e1e90dbf83b1979f7d03c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190455 Malicious code in zenobia-rate-limiter-cosmos-csrf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63628192eabab4fceeb1ac6d15980c58c5e6ed660a4f133745da0209a59ffda5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186926 Malicious code in express-buffer-quasar-reveal-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b57194e111538f98b9fa0a9a4608e20901da6e8c1d0755d9b65444908296ba03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188052 Malicious code in minify-kappa-proxy-kappa-tau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ffe6566fc5c2b06e8b71c81372166626f61185204af858dd2c9b8ef190fa287 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188159 Malicious code in mysql-enceladus-cressida-whitedwarf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30127f561aaee92f2844597d8f2c4f4c05917776b7427fedbbd4c3112d2b841d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186758 Malicious code in entanglement-greatfilter-void-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5c938a40aa714464f758cf9b7ffb6b9ac75e1e0bfdfb7fa0e1b292f499d3135 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...