MAL-2025-188573 Malicious code in passport-auth0-levels-biomimicry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b0bee65acdf68a6737b8995d1143686b1ef9027fdabf5ae14fdd070cbbf7242 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185421 Malicious code in aldebaran-regulus-bellatrix-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 466d3ed4652474b926cfb44ab27373bbae126cc4d987b1c672274fad890cded6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187865 Malicious code in loop-mysql-jwt-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 791ac5a1080acf1ebe75178fa67b303b7ebcadac3691bd02a0506a8a88f15b46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186404 Malicious code in cryptography-epimetheus-prettier-plugin-markdown-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2e74f3563293b19e2d0093030d411190de1d0d6a99c8d37a5480f44a9cffb1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189974 Malicious code in transhumanism-mesosphere-sirius-tectonophysics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b99f3f6f03493f0fd853fba2b0f358f5dc1eabd1c5fedf1fa998d64441362366 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189181 Malicious code in report-good-error-user-parse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e72c93e97ff1357de0fc34488e9d23d0a8ad52b71977cde7e0ac0a8ea5dc92de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190066 Malicious code in unuk-gatsby-dysonswarm-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f84f98dd91a2ce134aab93b6d61ef65104da91ef0514bfa2d9358081ca7f0ac1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189186 Malicious code in repository-heka-nestjs-mesosphere (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 280a9a067b4d3a3569af0705929db53acb6d1cabc8a723c0f0e6fbe9a4024fb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189399 Malicious code in sed-float-bad-void-stack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5126830f08c3414052bb9e255acb3f6e710990f3876503be68642689c721e9e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189930 Malicious code in throw-uglify-old-spy-water (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1384ba57693d772926659c64ade30837da4880fde1b05621a4e5b0bf482469d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187969 Malicious code in meissa-gemini-jupiter-heliophysics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 089faaaac3c0796dcadd5706ba9d72fecc451884fd1cf61f39081991d2cb04c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189704 Malicious code in stub-query-psi-throw-secure (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dd7b2cc2fb20759a58721427ac3d60016983e8fa20eac2a84777eb233da97fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189840 Malicious code in technosignature-taphonomy-pino-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cb950925743b43b318dc4f6962ce166fc091c100004eeb753fc231ed2ca9452 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186765 Malicious code in enum-interface-grep-reject-debug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9747adeee551e390a70f8a76ee111fb487d01e20f50b884d50ee6cbe5e0d4f3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186106 Malicious code in chalk-supercluster-repository-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8308f3d7c65ad1b1cf899c50d43219245550c86abbd2cfe3f0fdc45785ecb881 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185881 Malicious code in boolean-zeta-fire-omega-lambda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2cb7f8a6641e0545bddde60dbe3e670dbd50d4ad1135e2b340018411b59be59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187669 Malicious code in karma-spectron-parcel-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca8ebfffe8a310711076f2d7bdc505e17c208634ea3a5ea03c8ebecf21c0544f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189592 Malicious code in solis-troposphere-slides-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c03d4a07f458509a749319fab250192b4c3408f165b5865649842156cc6e3e02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190123 Malicious code in user-boolean-info-decode-try (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5255d33f074e4f791a5dccd9e6d57315c6fc8883da3342c9b4a0a9ca8c5fb24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190276 Malicious code in webdriver-mocha-tectonic-leda-antimatter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96d67a3e972f3e54d0491f59445975ced9290c471b9cc66cfb1b1de3200bb902 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...