MAL-2025-187395 Malicious code in husky-helios-wezen-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17649c319fbcd9560753b90dabe7181f60522771c2b424dd6054ff810384f2b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187837 Malicious code in local-farout-transform-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38a1fc589c9e69dcd54aa44a6a36b0916df594fab1f9c3f35a75006d3629ab66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188332 Malicious code in nodemon-europa-antares-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2621a646e147379df674c0d63c5f4ebb619019eff456c52c35fb9e6f4f8f4cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185512 Malicious code in aquarius-babel-nconf-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 367d06fdbae8de2b7d6bcc68f6b13999fc7160d92484baa01898cb3fd84acfab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188712 Malicious code in pino-virtualreality-cluster-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0a8a39dede87555b3f9d581416f4d22169c536c9e714a58d22911815b9f289b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186554 Malicious code in dependencies-dynamo-optimize-css-assets-webpack-plugin-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56b88c2d2b382ffb9df5c83d2623b4d0be3b8e53cf60c14ef812d31a57ce193e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186620 Malicious code in dotenv-safe-electron-delphinus-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d491829a6e7f4d4e2562199356d4961f3431ce86074cf26882ae975582f4b4e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187983 Malicious code in mensa-subscription-antares-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d55c01e441ccf96182c4b8b99c8df823b928bf5f93c08e93de762a8921a7643 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188572 Malicious code in parsec-wormhole-futurology-ablation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf1911b3c66def5ee6658e51820a9cae8886c4bb0ea48807cd601a9cdb960637 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187825 Malicious code in lithosphere-pegasus-jest-paleoecology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fac9378ba65444786e230b66d8117785b3cbf66c7c6c667007647fd65d49e95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186039 Malicious code in catch-float-cluster-assert-load (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aef58c9f874c23e8a9b27a97cbc7a46fbcce68e4f6bba08731fce9b4108467a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189629 Malicious code in spinner-spectron-electron-builder-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5547969e5f5ac3725394a5c2063f7d61a9754ae52484e58a5122af9dd4a10578 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186250 Malicious code in commitlint-config-angular-hercules-express-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ddef34412e83c0fbe8a9644690f235972b287dd6c6f27c8589726648b3334e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186103 Malicious code in chalk-soap-eris-mini-css-extract-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9dfb806249dbb13adc7a707fc35469c24fed0c44496bb851f9c5dfff3945dee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189586 Malicious code in solarnebula-parcel-biohacking-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50ed3cebc11406d149f99f7b8fed1fc90bbf3c960903007d1a3ee0dc48bedae1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188357 Malicious code in nova-relay-cosmogenic-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56dbaefb01969fdf64e8ec7433f6d512ba321800652f1879c013d3f2c5099635 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189634 Malicious code in sqlite-duplex-robotics-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f41fc7d49409f364c1793b954a916bbb4f8dd865b8617e989669637876bd85d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189977 Malicious code in transpile-bundle-upsilon-decrypt-secure (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43f3b2cc46e9852ad1e5d13517a2fc8779647fdf4b1bb64c894398cade68b86f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185968 Malicious code in cache-publish-decoherence-astroinformatics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f8c45af9f1f787eae1ffc6a38584c3e59ad89115ffe14aaaa705a8994e0708e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186437 Malicious code in cybernetics-duplex-oscillation-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9d5b9d148c937598d8f3ef6c189007a02e9549d690b0c4c30e23d467c599073 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...