MAL-2025-188036 Malicious code in middleware-antd-hapi-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f16ab9c55f7d6888829aa508c89f33d4f74cfb7599bff11339ce70c0d583a3c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190130 Malicious code in vega-commitlint-prosthetics-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dd5c39fe3aa4ba188aca38f7019952a1e2654a7b513aa87f542447a21b0cd72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186358 Malicious code in cosmos-concurrently-uninstall-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7db9ff87e8f4868bcedc7df7de1ff3a93230d3a0a503ba209371cc3b10229614 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189067 Malicious code in radioastronomy-readable-proxima-sadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12c1e2c1751d0b64e7e0b20911f9d0aa01575ad4dd030df8d55c2f0a5387bded This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190337 Malicious code in winston-neutrino-commitlint-tachyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b97bdfb05b80ec6b4079d0be6a4b023129346696b04cb5a90983c08c45b7d3c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186672 Malicious code in easy-link-authorize-simple-view (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 265547bf1390cb037550762c5d301a6413a77ea318a92378edf2e5eca552e38d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186479 Malicious code in darkenergy-google-paleoanthropology-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e7840b2d8bc4ea830f6ac0902efab2ed67a3181461cec1cc74a07a7c515f105 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188316 Malicious code in node-sass-eslint-kaus-relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 047a1ef16be5d6a938d9134f95717da44c3b091da7e0e621e7aca4dbbd6fdb18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186780 Malicious code in epigenetics-html-webpack-plugin-magellan-augmentedreality (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f6c9882b83d8b10007849602bbaec37bc9e44e101c89b209ee5a1081ef157b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189488 Malicious code in sigma-file-signal-log-report (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e56f9455f2e267b6923668bc3fcc20ae59667c62ffee139e2dfe75c84d11eef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185672 Malicious code in authorize-code-bash-encrypt-abstract (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd5863c4c6b7c7c4948eaf1cdb4d635734791e194435e929c9dc3d24a822889e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189398 Malicious code in secure-phi-web-yaml-socket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24bb7f54cd938265baf2a3052d77d5384cef40e78cb6cb96648925c983d7f010 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185410 Malicious code in airbnb-oscillation-commitlint-config-angular-palynology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baf800470a1681acff5740acba90cbf70748786015854f1268ff0cedb463fff2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190347 Malicious code in writable-lint-helmet-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d5a4b6d4af71eeb4c819c5aeed09820f02c8309f1b35be0b403965813dd281d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187618 Malicious code in joviology-mocha-cluster-redshift (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e9dd0d817cec48ab80cd4d1714aadf14d4ff65a48878f2666584abdcefedaf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185990 Malicious code in callisto-hyperion-norma-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0fe17e81c29306f1f25e84d0a6731bf3cf77c77932e4fcd2d1cd2459925b626 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186059 Malicious code in centaurus-biohacking-mongoose-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d482681a1746eaaa1bbde7130dfb8ec74d55c296d84140f66286c3dcaea82c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187721 Malicious code in lacerta-polaris-tool-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e14658508cd2a68cf53158830bd8ec585bd27f436ddb4ef01bbd48b3cf1384b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186163 Malicious code in cli-cordelia-chalk-redgiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a90893c3d7e4d4fa1c3626b55b27eb9e39f5ec83bb10dea8c99465c4493b68b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188581 Malicious code in passport-selenium-terser-webpack-plugin-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 602abed684a5ea387f7fc7198fa8757800994812e6e03ff63712b6dbbfb3e1af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...