MAL-2025-186800 Malicious code in equinox-sass-loader-global-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c598cba85983700b376ae65af350b9c9e8d3c93e46a7d3ad8ddc8430972cf8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185584 Malicious code in astro-cors-pulsar-neutrino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59931b01fc60b27e9ad893bc7767e2c241ffa9fd0413df3cddc31dce9fcac8d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185783 Malicious code in beta-moon-fast-authorize-deploy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04718f9575365342a95b182394e3faf16985b0f54304fe8408cb783b9ba9d07e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186108 Malicious code in changelog-borealis-resolvers-resonance (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b416fdfbee04efb784faadebdebb2f83d584927c66aae9b5f0c1ccc972efd83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188261 Malicious code in new-user-static-awk-zeta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9f9dcf7eed16e352a4e0fcdb4e1c39ec368864e56f59a7c610fef54ab9b66cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189971 Malicious code in transhumanism-auriga-markdownlint-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94ca6b14f6e0c18b868134377c560103624d5e12334780667f4b5e1ff6661ca0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186984 Malicious code in finally-notify-table-orchestrate-sigma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3d4ecfd3ec9e536b6f5c276f6a533ced1d24590a4a00d5d059c241e6c2fd05e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189985 Malicious code in transport-postcss-loader-terser-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 631fd17e74b28d64566d646ce664486a32476490f54ff15c546111e8e1fc9db2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188733 Malicious code in planetology-biogeochemistry-areology-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3ea2cdad2ea28eee97d50e39769c35265556f86264f39d84627c958c5f00616 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186997 Malicious code in flare-polaris-sadr-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1ed2baf393192b5d6507e61ac34292a1a2f72fa14241f210bfb3dff96c5dcb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185797 Malicious code in betelgeuse-perseus-despina-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba22f0c594d568d54e12967d841c787fd3e71573d84357c6a218f291e91747a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186519 Malicious code in deimos-polaris-gridsome-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2d7daf5a58341775641235bf8ae1045625d4dfe06b3b0772252ddf9a2d15bd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186235 Malicious code in command-pulsar-atlas-on (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72b38ad021b2edab7a1022fa57221eefd500f88a7e7cf7d45dffc7b50ed47d2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189939 Malicious code in titan-iota-carina-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae54b5aeb01b3b85dda4f78f0dacbe1fafb98fef139ef198836d50da8dbcd7f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in playwright-sqlite-neptunology-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58da81d5fc794323ca39eade6fac2190d7362bfc3ea12fdbbd7e7a487f50081b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-gnyagibhghygdyui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbea887ffa500e33cf0f11a4bffad3485306217c6eaf49d2c9de357ce74c2690 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubb-avigfagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25b7b65ab3af393482d0ecd44e8e5717f9e3d04b767e905c72ddb5346ff44291 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-gnyagibhghygdfyui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c38318e15828e83b1e21536fad3fefe46a16d0e8fe6b149a57ca3c503fe692e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-ots-uyaidoagiajb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcb16cb3c74f751bf99c6b6d2b78ebfaea9dd75247ef575ddd326142b5eb8309 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ubib-gafub (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 916701b1b6ad5619f5403a69fec5786956c7eb7800ef9d35ac92ba99ffbfcd56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...