MAL-2025-188788 Malicious code in postgres-buffer-prettier-stylelint-lithosphere (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bcae0ea337d009c8867a14a41634b4ee66c9be2e9e4e2b119338b7d2420356b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185574 Malicious code in asjustmeteai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 488a12e01a7d9cb98b0bfd0c661b0036427ab1ea7bf5bf5c505c75751d268134 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185370 Malicious code in acamar-child-process-oauth-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aecf9405e1356b230c3b5e02f074df3b4d1c15deed220a1ee0fa696389b7d321 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189965 Malicious code in transform-forever-quantum-computing-archaeoastronomy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 670dab104ace8220a6a4d15814c89357d5aee51b5d8f63e9d6df78d1ce4735a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185731 Malicious code in bad-eta-encrypt-error-signal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1430a541231c581ecaecf6111ee0646d539ec2f560fe6401ba786567cbe1eef2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188246 Malicious code in neutrino-radioastronomy-comet-planetology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c5049737339f9d2c21434a980e4d0f599495860ad89b11345271bf74c80809f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189766 Malicious code in supernova-hyperion-tailwindcss-optimize-css-assets-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f2ef4131d23bf5c2293362acd0d6a0d7dbe8c4af28eb05c78cebe4affa6570c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190161 Malicious code in virtualize-cache-cloud-cat-slow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f9eab5d5a3bb370cb101f7ee9bb7fc97ee9ff9c07c7e0182e1d89cb76688156 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188672 Malicious code in phoebe-holography-deimos-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f786ef6f1326d79ed74a82e68991e790daceb5da183862a7f8406b1c60880be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189082 Malicious code in rate-limiter-chalk-miranda-cassini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97dbf12820a23efa6071dd559b66e1fce9c4821a398877a4c63e432d20b01f2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190297 Malicious code in websockets-thuban-antares-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65019be03a37451ba468ab0bec426af96f0ebcac58d786c0822fa0a5077acfd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188138 Malicious code in mui-delphinus-castor-magnetosphere (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 750dfe89f0a2461b38a8de1045bdda9ffacb48ec68c2e64e2b316ceef914074e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190215 Malicious code in warn-shell-async-virtualize-mu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2cb078aa4325f43d18e8c37fca0a67c9e6f5a8d01a809b7f99bedd3f8f53334 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186148 Malicious code in chromedriver-hyperion-isostasy-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bba21800fecd9e38da48ea31cc273e421e261933c1367a9330955505b5dcb97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187994 Malicious code in mesosphere-private-farout-boson (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 982be16bee3a131de3f0ee0733c342b0c9531bb8820ee69c8d9cee3509fc71fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189604 Malicious code in spectron-commitizen-server-jwt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f5520a0221162a9daff8f9fc7fd1859cb9e5017d1fa3d3de33024e017fc173a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186777 Malicious code in epigenetics-cosmology-radiometric-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20bf5c56a9c6317de0c54037cc6cfdd980b74bf235b9dc3993359cb8469c2011 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186822 Malicious code in eris-writable-docusaurus-on (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 722d4d900728b73a74cce7951c7c4f7bf6d25c2474c3ebdb2614383d6b187cfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189961 Malicious code in transform-blitz-element-ui-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f0718911e1bd9246bcc62a5c6328b03e3846539f5bb7a874229116d8f787ff8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187586 Malicious code in jasmine-cypress-gravity-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c35dd10a0b5c8d4d8b08bd196f82196d1f827f8aa2da53cab2ce753a17487cad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...