MAL-2025-189484 Malicious code in sigma-awk-abstract-error-kappa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69d501bf3234ac1bd75171ea127e1a4bda1473613eb110a0228aa8c4a668c5df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188178 Malicious code in native-electron-builder-nashira-tachyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2c326aa33890289362406cb0f22eec8401d0b31d237121e8667b24eaa89de69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186386 Malicious code in cross-env-singularity-europa-paleobotany (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aff3602c31a1c627dba4e6eaa8d920964d7902b51de88538778b11058f2f032b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187305 Malicious code in heka-markdownlint-rollup-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3918091bf1dccaa7a82585cf98bba21f487de7dad3e092c4d5f4c7b1b3c7e9ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187613 Malicious code in jovian-postgres-webdriver-mocha-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ecf3fd1d508e4debb89f36a79eb6c7ac29572b4b9404eb582a72f90583c8daf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185996 Malicious code in capella-biotechnology-meteor-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7007c2c8f13c28e4f7207166e71ebaf1dd15e71fd1b55b1f8686c74a636216bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189811 Malicious code in tardigrade-mini-css-extract-plugin-nightwatch-blueshift (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eccd2dbe37050ec44770db072262af063d90c8cbb1f901cc4ab7337d91745c94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190311 Malicious code in wezen-halley-less-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87bcce6580c517f2e33e3a86f226fb4787f5a8348a800d827a98bff9f31c715a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186430 Malicious code in csv-helmet-dione-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c13660b1e5cd8242126ed9b1d8d9e9fd3a9430c6c23281cb67541a8d90eb0873 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185962 Malicious code in cache-hercules-xerxes-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45f69b9516b5689856ab0f034e6559dc19e5d5a4a5c4451a823c9808a8c4cd03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189660 Malicious code in static-public-omega-abstract-upsilon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82ac38dd4021854b3cd24d798c971942b5a8610691c7b1bc524209f69ea59fe3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189581 Malicious code in socketio-webdriver-mocha-kinetic-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 150f89806d0e3db6e1a5a953b3f96457bdd5d51522b9cbbbd9401b3cde6bcc82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187896 Malicious code in magellan-astro-webdriverio-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 956002abb27a2f289c68e054e9fd9ee1991e2691200e686d03be1ff32801893e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185636 Malicious code in atlas-enif-enif-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e642c8c15cf82070e938eb9c499479431db8e332a15d25abacc3ec9fce5d914 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187501 Malicious code in integer-omega-virtualize-star-meta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f17b62eb52e500d6d763bcb97084f1de1bafb8b9176ec2a21c9bf2c0779b280 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186751 Malicious code in enif-frontend-carpo-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7fc721aabd2d538e8644cb4667b0304f9635e08ed0d4c2a986383e4a2ab9e41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188795 Malicious code in prettier-despina-gacrux-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00fec6deb30bd5cd5a5e545dce825592415f1f20a4686a084e6cb1c5169e3902 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185557 Malicious code in ariel-backend-css-loader-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8985f6f4b26a752bfd23a32fbbf39c2aab5c6b48f599eb0f46f6398a6833b115 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187464 Malicious code in inflation-apollo-rocket-higgs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 395b1247c5e72e553ae03620ece5fc27af309bb24287205d0b5f511c0c7a50f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190417 Malicious code in yakutsk-luna-nova-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1247a887e7b5c2f9fd964d4f486657e8b0b2f0cb3db19d32b6971e95515ac6f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...