MAL-2025-188964 Malicious code in publish-zephyr-tethys-jwt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dddac6c7658d6fc3bba49d10ed2ca7d3f5baffeb4d7b34f7de85a3770e2a88ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186118 Malicious code in changelog-unuk-antares-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d90a92b9a0850e106d3410f591ad1745399775c72d60a56b79bdbe04082dc27c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185934 Malicious code in bulma-promise-redgiant-xenobiology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea908eb89c40ecb98f25cb7fbe7bdb9575dbd9175140d9fba6315a9ce87d4814 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186586 Malicious code in dione-dorado-apollo-mongodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dcbc7931eef29ac5c5af7ba06802424115895cf2f3b63f7ae23d400ffbdde7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187895 Malicious code in lyra-xanthus-csrf-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b0400e33310dc0a2fd44e038192baefeffcefb683ae979ca17aa648245da1fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190209 Malicious code in vulcan-semantic-release-pino-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c72d9e409094829214238543e07bf97ca0de11f012ae732f970551021eb40d66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190322 Malicious code in wind-char-function-resolve-enum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f350467942a4a8ea041da2a995b65503e5774b4faf4936634f965be557a5c4d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187708 Malicious code in kronos-phoebe-kronos-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dc25b80229005403d5a869b7a5ab665719bb0043973fc6000c8f42696c5c624 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in link-sedna-paleomagnetism-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89f83ee1bfae66dc7210489390d14334111a3890b2209f274fdf0e50672ecaf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoenix-nova-pulsar-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81c49362126a570ffed0fa24233e65c750b17a8d224ca38dcda9ff340d682b39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in easy-interpret-big-proxy-scale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27e1a4cafec6bf1cf5e6e657300eb2f4ec854809b9008a485341088d0b0bc51c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moon-unix-meta-process-kernel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 432d18ccf99d5d85dffa21aae798b7ec0ce7b7df8d0070f8e8d4c477f92b2037 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187199 Malicious code in got-install-blackhole-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3a3e26fb5f46474d8fda65b2e4d835c3e4054442e31f815bf5caae9234f62cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187282 Malicious code in hash-char-new-alert-sandbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 157e9621c61fae908d1e7be8b87a7307a60fae9033b01116533f0b50fe64262d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189952 Malicious code in toml-terser-webpack-plugin-process-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 108235f2670a8c48b92eae1fda9fbf2849586da19df4677671f9ef5128bb5219 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189017 Malicious code in quark-dorado-ethology-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9270626698c8706953e8ddc2fe61d99577497576cc954a81c95ae6ad4a0c625 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189416 Malicious code in sedna-palynology-aquarius-lithosphere (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eac0bbb77f85d66e96e7621b2df56694543e202d7f900f824020d324e9e6b068 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186458 Malicious code in cz-conventional-changelog-stop-readable-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 409af1f40cee40b2159b3a8d5e2b0d4416b25c8e18bff01a890829e0bb75d7af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187248 Malicious code in grus-schema-odin-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5015d8e05db5097f2ab0758f0d0d42285be94e469cecf52668d3df1eaf57c9f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188352 Malicious code in nova-chakra-ui-css-loader-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d33fba34563f447f01ce0f666ca1461181b88fe72fddd18a86916eea8ecf8b6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...