MAL-2025-188411 Malicious code in omega-big-zero-export-java (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6452494d4a91b262c8f8c973f098395e47d3fd525719d07e2c95a4915fae749b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187954 Malicious code in mdx-kaus-browserify-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c35c481bdc9c3cd04791a4bd2aea3c97faf1ab41752bdeaa06954b53da493801 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186653 Malicious code in dynamo-leda-registry-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c347466e8c07922985807bac40056e427e02532dcf757e70cd0833d2f05383b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187707 Malicious code in kronos-lynx-brane-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4b0fb92e5f1f3a612ab9477511fd26789ef0566213df6d8bc93ee1ffa10bd9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190041 Malicious code in umbra-octans-ablation-deneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b8978bd923183b2f8c2adeb260b1beacf5596db8503a689fa02d4d665279a18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186139 Malicious code in chi-route-good-integer-grep (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdf3808047bfb574e402fb26150085e65281d4b7fcfa053f879b3931c17b6b39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189100 Malicious code in redgiant-cypress-mesosphere-technosignature (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7930495e498f951b678a425515b1e968f43a896afad015516602ba290771553 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190317 Malicious code in whitedwarf-fomalhaut-nodemon-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 485383a1d4793fa4e99c507b8c6475dfc9bc9e56e6433a5eb09c6255405a640d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186679 Malicious code in eclipse-levels-lynx-nanotechnology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e16a598e256c596a0ce072b0c9bc1946d67911157b58b0ad8cad82e607360b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190112 Malicious code in ursa-neptune-private-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f52b0f332657b30012e36de791eb249b16eb29d11bff1160e4f4b4e5e643cfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187087 Malicious code in galaxy-blueshift-astrometry-quantumfoam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11c73a4c693491673fc8c94de7e4e6149530af1635a4e9230317c4fbb26d2a08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186097 Malicious code in chalk-mira-procyon-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0669f795188c9df9f20c3ef0e98834b88a8aa721162b82698be48039ae152568 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in finally-stack-error-cold-assert (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 851d0023f1b630511561a3a8277fcd85b55a566b9ea984b4ba5f4e35d51eb296 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186178 Malicious code in cluster-concurrently-wolf-astrometry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a5d90621c5bb537bc01ee7d14ec63f964ea166320b8b97d2deb75307c0650b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189940 Malicious code in titan-link-wolf-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5635cb19cc5d81c41aa823641a3e6ce5b8e942e8d03a61f99c85afc4412e62e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187927 Malicious code in markdown-multiverse-vuepress-geoarchaeology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc4389cbd599d8b51ef8b9f455d0dff2181aa051854625dd0c231e3d4c364cb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189261 Malicious code in rocket-jest-astrophysics-speleology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca197e20e95dbee979d38927d9d26ca5234dae33e996d5f4ebb63ed864c4329b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190348 Malicious code in xanadu-dotenv-safe-markdownlint-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3910fdac95250d53aecadede785513f9beceed180e4330b90a3808d260b82a43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189177 Malicious code in remark-io-sass-loader-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ef20101ee38f63c38e24ae8f075da72835328afa3145f6b4e7eeca7e3e984ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185759 Malicious code in bash-serialize-decode-grid-sudo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f77e4d6d27883a5416570e199d67bddb626be68458845c00ac83a9c839b6da5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...