MAL-2025-188933 Malicious code in public-auth-hermes-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6acc8648d18302379a6ad78064207515f06962fd2044c6a0312ffef45670b15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187698 Malicious code in koa-callback-postcss-loader-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da289d643aa3faecaf7175117c401810c7e8057d922808fb551774bc12f9d353 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189689 Malicious code in stream-yildun-bootes-neutrino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44feb90e525ec1381552034b9dc1728345a6d643d0c8790072c8a233cc41e200 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189655 Malicious code in star-private-minify-bad-compress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c073ea8c71ff7c1c682370bd5c071b312cff6ebdf04d0b7966fe8d9f0e529a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187471 Malicious code in ini-koa-adonis-astrometry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 814dda9fc098a95449685bf70ed597eaf7718a69688a6739317f7af0058ac94c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189952 Malicious code in toml-terser-webpack-plugin-process-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 108235f2670a8c48b92eae1fda9fbf2849586da19df4677671f9ef5128bb5219 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187954 Malicious code in mdx-kaus-browserify-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c35c481bdc9c3cd04791a4bd2aea3c97faf1ab41752bdeaa06954b53da493801 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187002 Malicious code in float-rain-finally-yaml-air (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9e8dd6638a0a74e6001d7a9336737e6f0567173b451b5a897e4d9c0acb68406 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187459 Malicious code in indus-neptune-typeorm-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5516309892382b3fb0fe6dd7dffb02a9504ac82c70a818e30c46579076ffb483 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187481 Malicious code in init-venus-sync-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41b6e40d812a9363fa5f719d89f8033b005cc387fbeadb50dac11ca6fcd9ba44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190148 Malicious code in view-fire-data-simple-uglify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 457e1c0ae45b135280fa0b425dd5715c4b732ec3230dd089a53583e0e1726641 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188152 Malicious code in mutation-docusaurus-scorpius-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8f6271538fff9b9ee158666dd6bcb5e2c1ffc3f2da26a8a7cfa3a22b2286e59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189963 Malicious code in transform-command-cors-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec1e5fdd3ff42bdb4fc326565165f244de82f2ff60b02bda4c9ec28c93e9da73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188188 Malicious code in nconf-aurora-ionosphere-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90d618fe2bbc27849bdb3b7ab0735de3ede48bd7a4f02e7614ea1745ea65ea02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186490 Malicious code in data-grep-string-transpile-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0baec754b0baf24fb249ba7fbb7cc8b4653d63b04595b2df0119337a6b7e57b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185613 Malicious code in async-command-farout-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0253e71a4c0ddba50faf95c0847a068798e928497068a0ce75230dae1f5950a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187059 Malicious code in fusion-ablation-cygnus-parsec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 675a39543d6664cc9f25d2ab04083977400a9d213cdefc19363fd94b3fe9fdc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188378 Malicious code in oauth-neptunology-lint-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95c4cc16ff1626173c0195d83335a1da888d78e5e7a6f5e830831b1ee8647d3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188284 Malicious code in nightwatch-firebase-janus-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f114266d957185bc93c8b22586ca07de60a7351df40704e372b30ce491e652d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185877 Malicious code in boolean-double-benchmark-star-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12e5c0f3b368d68a8ca0642ddefa6f85ba5d3c3f8a3c01cf6b088c175dbea41a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...