MAL-2025-188999 Malicious code in quantum-computing-server-phenomic-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e4eaeb6ca6f3e7e8583b6325db4dc2405956f5cf99b5fea3fa0a71ec3990d93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190135 Malicious code in vega-toml-hexo-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efb24c32e4d09b99287614e8f188638625c244dfd0b4f79bb5170f0788ef9b80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187039 Malicious code in foundation-await-pavo-chariklo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c032862fc81e78c2d89207df7e5c2e61ea1a07ef25158a271798bbb53ecb4610 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188234 Malicious code in neptune-webdriver-manager-vuetify-boson (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ffdfe1c67faa783eb8752ac15ac0a09ad0d5148686b1b4b60b2f6870e5e27a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186799 Malicious code in equinox-passport-janus-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3f11b68e3638d03fabface74d4eade1bc5f8df93eab7c0a224d47b29af1d9d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187534 Malicious code in iota-betelgeuse-rest-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd0e703cad5e264ff6cd15d8e11e8c48ee2bca0d47dc24231d6c328716e26e2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188992 Malicious code in quantum-cache-nebula-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d3d89d79894f894432d6bcbb8cb3e71bbf07e3fa485b1c79e450c403cbbd96e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186835 Malicious code in eslint-config-jovian-middleware-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a08e1a70125c98d783c4675a920d9eefc7bf5a6891ae90b0e858fd9a3a898c82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188596 Malicious code in pegasus-kinetic-betelgeuse-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1eeb701dbb42b94c86f002ac002aff1581d8e3f416669abce192f22f0f377d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189374 Malicious code in schema-dependencies-paleoanthropology-xenos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a5aa35035cef2c1cc6c6bdb74528d86c9297519b890f65258d575cbc34a28f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190415 Malicious code in yakutsk-blueshift-supervisor-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8265e7cc3ce2aa13db6c24fbe72eef89e0b1aebe54afa3c2299c0f4527b734f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186615 Malicious code in dotenv-parse-variables-astrobiology-readable-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 465b6023a0ca0bca6df82d4e7fea4d734021c77c8d00b4a7e90ddac9a6e59305 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189694 Malicious code in string-crust-exoplanet-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 607e2f5aeee990d1d2e3b76b3468cde2ee84ab17224b598c35f9804f65bcc526 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187728 Malicious code in leda-cassini-dactyl-mongodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2202684f09a6fade6cdc2675dfccee158706ef464f4837c0be92ef6e5793e07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188849 Malicious code in procyon-slidev-process-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebe7f5587bc3c5a7bbe672d92c0b642e55fdc99413d08dd5e583811cdfc8474b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188425 Malicious code in on-eigenstate-eslint-plugin-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61020121bb5fefbd87e738daaa5fa258f3218c907118b301862e4333a537ef1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187228 Malicious code in grep-emulate-module-assert-chi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c75466ab2e6d7a0911b9994ce70e2bfe94d442f610e416ddf1214d0dbe6ead6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185673 Malicious code in authorize-float-signal-string-table (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c818eb168c17bd59b31cd9c9fd8fb24062591d2a7f46885d4ae24493b54d593 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175496

Malicious code in xenos-nconf-aurora-redis npm...

MAL-2025-190392 Malicious code in xi-minify-bundle-sigma-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0d9afe7d7141055c0838ad1a3d5294b15a110475b4a168a1ba8da29c0f3f468 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...