MAL-2025-188958 Malicious code in publish-superagent-rollup-plugin-commitlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5549aa2809a51a1689820cd3b387c36f2d9dc197d3cb4f92ae2654b6b95a323d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189375 Malicious code in schema-terser-prompts-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 029583d6bd02442384a67da12922a4a0daaac8b98c374339699e8fe7e844adcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185565 Malicious code in array-async-export-lambda-transpile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1c2bf7c9af1def9500860d07c8a0a69f31f3575833535c28b6b1d0715a5dd9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186706 Malicious code in electron-tool-nashira-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33b3527ef543cd69dc1b34fa0d37ad7afefd89e8a81e1a3ee9587b8811cac440 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186917 Malicious code in exosphere-rate-limiter-transhumanism-chariklo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45bd20b23ee0ecffdb48b76d8fcdc102490fcdfd53b365e4e5e3b2812e4b4245 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188956 Malicious code in publish-proxima-glaciology-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e2708eebd804a59d4e418e03bd88ebd3af318ca6d70d923ba07a3a1b203c03d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187265 Malicious code in halley-blueshift-sagitta-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c1c5d6bfc2336eb699ded75fe930e0258ccd2156247cc13cfc2dc4064e9612d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189612 Malicious code in spectron-pegasus-interstellarmedium-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b04eb1d5d63c9f3aabf811cac6a6ce9455d32889b996253d4c4aad321324328 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186788 Malicious code in epsilon-beta-key-double-assert (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f0681495491db7e545763d456b2c3b521039fbd9b347d6741ec1d056df57936 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189201 Malicious code in resolvers-query-comet-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f32d247fb9e7fef3137c36bba9f109b99a98b0e64d2c7664eab01c964c650d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189384 Malicious code in scripts-chalk-nodemon-eigenstate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85ff9d37ccd592d5799db1e3e194c0c92dc1adedeb27ad583add87531d2bea23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187026 Malicious code in fork-wormhole-upgrade-geoarchaeology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd2362721a82c4e9baa81333ad60e9f1b9209cc90e516120447193783b5f4b7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187791 Malicious code in link-emulate-double-table-book (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f82ea3cfbf4ead6d879ce2cf3a4148b644434223de5718844f6f514cef0a842 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186451 Malicious code in cypress-technosignature-solarnebula-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee5b6d2c365fa8597a05437b8cedda2feb5adf1dbce76e271afccd20f7f8e10a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189172 Malicious code in remark-deneb-radiant-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84ca8dc561feea70ef2e90e453769a98158249192e0d45e16a69561f1949de01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189368 Malicious code in scale-deploy-pi-simulate-load (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52fa017a28d30b614ee50a0a757c91fb23576c9b1ed146e6df71f8e508078a72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189594 Malicious code in spawn-corvus-elektra-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e45a2d1730f87b0c7ad3fc6d33915857fcf5d83c077794051e825175b6ec7b82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187083 Malicious code in gacrux-figures-postcss-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddff144498a159f4f0aa53d17350ae7278a0691307113dbcb07ad4f8a5671e0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189465 Malicious code in server-publish-ultra-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80a79a38e0a196ea73bb64460ddb5a414d0daca9ff3b5f70eb45ce4fc3959871 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188285 Malicious code in nightwatch-global-subduction-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6db5dca0a960c4affb7ee077ac8b2613cfe86d64f6224a89a259c25d733fcdf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...