MAL-2025-188572 Malicious code in parsec-wormhole-futurology-ablation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf1911b3c66def5ee6658e51820a9cae8886c4bb0ea48807cd601a9cdb960637 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187454 Malicious code in index-short-java-phi-virtualize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40e263ba680a09fbfa7fa23f8bee80092a3b81959c15f1cd633d5a32f174fd41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190266 Malicious code in webdriver-manager-stratosphere-stratigraphy-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0934643185b5cbcc16307cc870692bbaf0a0c6ef0085d73916acdc478aa082fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185697 Malicious code in await-mesosphere-meissa-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b34101e61927586d02c2c662fce1eff112c80ee71cd05aecf02621788752976 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190385 Malicious code in xerxes-koa-promise-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f7f2f61998e11d01a86b314c656f657f5b480c9796ae6910da2c471584dfafc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188728 Malicious code in pipe-wavefunction-test-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f380280d6a4001277413145152d77591136530660904e107761654fa22ec727e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188347 Malicious code in notify-omega-process-kernel-protected (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 227e8588cf0cf575c422c862ccc3a11b88efabe78157d3b60216f9835b90158c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186650 Malicious code in duplex-tailwindcss-nestjs-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cb446b2c191323971e7ba7bde19ddb20f59f29b7a2b7e053f8d6473d29796b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186660 Malicious code in dysonswarm-joviology-node-sass-troposphere (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cadb29ca45a130c2e649695523569350f25997d3168881e298d7c8c83e8863d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186846 Malicious code in eslint-plugin-mutation-geomorphology-cladistics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ac0904819dc58aca2f9b2d22deb2de205f2e302a35166513ba08c2cf0230cdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187187 Malicious code in global-schema-unuk-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aef95ff16cdf95db51f17b07305ed739636baecdca77c9ac45f76f5a27c7d581 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188345 Malicious code in notify-beta-tree-mock-minify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cd7b1d54a109d886470b1eb138564f487c08a552cb82b12abedc42d0adfc3a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185670 Malicious code in authenticate-function-scale-cloud-socket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f528c4889d7cc48c0ecdd516f266fcb56461b67b151309f56a99d332024224d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189115 Malicious code in redshift-run-script-chai-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5286f36483bbe7228cd4a81c89c18519248a77be151e2d05f127fcabe320b31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188400 Malicious code in odin-mensa-magnetar-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b16d64969c8f5d9116a9d619232f9bfb3cc7ee0898044a3be804b3e30d3f6e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186304 Malicious code in cordelia-babel-on-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 991867c5b89cb50239cb4c2cf768a904fa2112cce0f729488b115918476c467a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187851 Malicious code in loglevel-meteor-mui-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ca35c471536de6395cd1a455a18886f5a26d7919adfe6f44006c4879d894dfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189558 Malicious code in soap-slidev-carpo-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ae0139684ff37091484c18ca8bc5d4cf9f1515aa5a2f6022fb21a338af537e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186071 Malicious code in ceres-morgan-stream-singularitarianism (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dae4ce4c31ac711814d131a9c6b1da98e65f88a126235fb618b5521a965dd0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190106 Malicious code in ursa-eslint-gemini-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1630e5264385a9c74585ac7083a4b36aafec62504d3d7b3b68157e82eb2a04b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...