MAL-2025-190066 Malicious code in unuk-gatsby-dysonswarm-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f84f98dd91a2ce134aab93b6d61ef65104da91ef0514bfa2d9358081ca7f0ac1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187828 Malicious code in load-fire-balance-try-old (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ed8bd45f714ed76dc28e104d80484f6275477e646f6d793386b90377bb12749 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188250 Malicious code in neutronstar-hologram-volcanology-asteroid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e16c455d2bae43492d5ad9590dbe8f3ae4aebfbac806f385ed676a3856de3121 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190032 Malicious code in ultra-library-remark-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26fdabd876905c82741cd96325f093bde824e42ec0b025da6126b2faf6a4420c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188305 Malicious code in node-config-cross-env-event-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 633ba8b5bb0c1b25a73b775f05ef07535394081a99d38ca2eb989da5e9df22fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189737 Malicious code in sun-throw-export-xml-java (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1a8c5c8cb4363555683f11715c0cc35f6b75890f98cdcb908f646ad221baa6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189799 Malicious code in tachyon-mesosphere-spinner-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0199d4ad6da5ed57f1010cac95dc16558ece4d84ae6e6c6fb857dc52e6c6370 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186202 Malicious code in cold-phi-cloud-cluster-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f0e9984087d6fc6265ee22bf94590da86323c7d97b5205d237579d0a5556bf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188003 Malicious code in metabolomics-octans-soap-membrane (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1129f0e41c2b3a17aa60e8ab3ae6076953be4f3882077300095a37d4d48c2647 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186977 Malicious code in final-bundle-zero-string-deserialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4aefc4086fa4ea1acef701c2a943e8d823a65ab7600d101acb3b3e1c82b976ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190414 Malicious code in yakutsk-alphard-winston-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42520c8dc3cb5fcd945016e4d3fca6d736c2b65f9e37c7c765d7c18be63ba45d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186186 Malicious code in cluster-sirius-promise-neutrino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 246366ab6b3632e7b423af9e451968b2bf746434d27260f7b68ffa2a924009ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187986 Malicious code in mesosphere-chai-hermes-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c3a859d8b89079691e1fa4081212caa22fbc584c0379ef009eee6eb1c9d5ba1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189881 Malicious code in test-cache-rehype-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c6d134b4980b93d8c9ca0986a32a823ed1185745ec35ae4127978f61c7e7324 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189667 Malicious code in steganography-yaml-quark-geochronology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dbc57cb69903aaa2db9f1b9e287c532e67cb38af8417ad3e70686986e074406 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186109 Malicious code in changelog-graviton-hadron-panspermia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4654a7b3fbdc91ef9d6bb9b21a92ed4ef7c06883f0343185ff0493e3af578e1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185437 Malicious code in alphard-comet-transport-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2c8d92d35be1e1dfe8247bfe1991bc31f583cadc4ac985cb06952c40c4ae695 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186769 Malicious code in enum-report-char-rho-alpha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75fe47f9adba20f092284e704a6a5619427390e0fff83d48dab8122cbd9ecac6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187742 Malicious code in lepton-husky-phenomic-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc8e5f8a7b80fc50583741a5d4fe7563cb8ec3706c4e734dffb7de609c501073 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186205 Malicious code in colors-nightwatch-antimatter-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45bbc42bfa0d26b381b4e233ad4e21cc124d0cba8b19be2bd2be1cf86e922a6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...