MAL-2025-189147 Malicious code in reject-book-catch-module-short (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b8b14b5a95ce44e95fff509182c83b828055877000a05d9e7b4447abe77c430 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186945 Malicious code in fast-java-stub-void-bash (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbf6d41c7ef745a2b7ef1562477f9a960072b1225abf823fd2d741c10222a6ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186210 Malicious code in colors-superflare-rigel-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0e903a3772257f571117e9c4c67e3181375d448e7529e39f970068e1f42f8e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188639 Malicious code in perturbation-bulma-mensa-eventhoriz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d51a9c3a3b80be94feb024b2c0609f78f69db01e5b8cb7bfd485aa825e763b56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188609 Malicious code in pegasus-xo-charon-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 181224c30ecd7ac564d8ca1c19e9898a3d4893ef3135055451b9a6683c264f9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189370 Malicious code in scale-hot-tree-cache-execute (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca31f523c05889fdf9ef41a4517c7fe41532a653c9225ca1d2fc0b4f96c7b705 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188576 Malicious code in passport-fornax-phenomic-helmet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0027eccb2059e4e9d4978c1294182a8c666dbf5f0394eb96327a6a25b3a20c88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185604 Malicious code in astrometry-passport-less-filament (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c137c4ef5872efdadb22fcb81eff579f9b3d68099ea3d74d52eb029fe7d10edd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189814 Malicious code in tau-data-grid-minify-function (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51fd667a40b0b62ada505565aab53c39d96f06b26be3e9b5ce274831637ecbcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188234 Malicious code in neptune-webdriver-manager-vuetify-boson (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ffdfe1c67faa783eb8752ac15ac0a09ad0d5148686b1b4b60b2f6870e5e27a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188707 Malicious code in pino-pretty-prettier-sequelize-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e3bde5720db4c2110dd2e282776b87cae97883f7ed7cd03ed524b7a0c027d9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188171 Malicious code in nashira-dotenv-parse-variables-gulp-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f07680065e1750d77fa79d213b3d258047a7ca301196ff1c2812354b0298015 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187656 Malicious code in kappa-encrypt-public-rho-boolean (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 656709df41c0061ebd217bc1f9d8008060baf2008b8c7f3bdce9147727b37576 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190239 Malicious code in water-balance-serialize-omicron-deploy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10b645228c86dd124d31b5de28c55a401743d95fcfde72307326120b67d14f46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186835 Malicious code in eslint-config-jovian-middleware-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a08e1a70125c98d783c4675a920d9eefc7bf5a6891ae90b0e858fd9a3a898c82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187584 Malicious code in janus-rocket-crust-xerxes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57d68df4dd0ef3941fc01f5427a525386ddef1adb2f0de27c41bda77a6971c9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189053 Malicious code in radiant-cross-env-neutrino-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aadfcd3521c85f083a4e6d18c4f8c6278368aff470db93bea8a5a10d451720be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187757 Malicious code in less-loader-react-bootstrap-cosmicray-spectroscopy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34b22a3237ae7e67de2b1fded90e8aad83a6fa3a88ed44ce7d4329367a38aa5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188146 Malicious code in multiverse-jsonp-mdx-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 318b505452a0445439130fb4c30bd9bc2c4afb2b92ba690f9cba25b020aa08cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186861 Malicious code in ethology-phoenix-unuk-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 559be27cfb1ab2f6c01cd82e42610f9bb22a82253b37efdce765d9ca8e93c5ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...