MAL-2025-187140 Malicious code in gemini-ionosphere-superposition-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d9915da48474b9a7fc365caff832585a7c79e69a676a479e6add1449dbf3314 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186101 Malicious code in chalk-pulsar-native-xerxes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77f6eed59f7619414161370ad50e8f5199beaf6fbc54be33c3655d66196b94be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188167 Malicious code in nanotechnology-eventhoriz-iota-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 102b7412ed071b1287c6050f772940693ab260bf2618bad4c6dd653944b1ce44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188119 Malicious code in moon-new-cloud-mu-cat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7213659a3b8201c11de4613fcf1612a6f3efe3bb58d2c69ab5633e9f00655521 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186750 Malicious code in enif-europa-lint-staged-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0a4b0d4a573c4667cb852c344a431b5ebaf4a80efa62ab03d67cc62907c2c5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188408 Malicious code in old-reject-mu-char-decrypt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 795581f673163aef7e16e1a617f1c1b6d1f1fb115d6ecfba311f73909abab4d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188876 Malicious code in prompts-xanthus-blitz-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5254336ae396f90fdca8d9a98e3c45ded6be01d1e812733bf65f8d8a93c58b39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190276 Malicious code in webdriver-mocha-tectonic-leda-antimatter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96d67a3e972f3e54d0491f59445975ced9290c471b9cc66cfb1b1de3200bb902 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188818 Malicious code in primatology-middleware-planckscale-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c06a16d39babc5b879b4fcd7ca4b45293e129f38f2eb2e9bbd4ee8da57d0a56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188448 Malicious code in optimize-cache-static-orchestrate-import (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa661ea8fe97761367e0b2fb10ac18b163380643bf7efa070ae42b2ab09d95a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186149 Malicious code in chromedriver-json-polaris-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ef32861229671cc069a228322d0a6b1db62d689ae18e79f73f60ba5d10f87ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188807 Malicious code in prettier-plugin-markdown-toml-reveal-md-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ff999735f3feba34d19df5a1438749dc0508d8d6210fbc23713452c707547b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187791 Malicious code in link-emulate-double-table-book (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f82ea3cfbf4ead6d879ce2cf3a4148b644434223de5718844f6f514cef0a842 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187092 Malicious code in gamma-integer-hash-double-tau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68843289b91c66d58ea6949f006e97f32e4b097feb47c1b22cf3d57e75c7050a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189333 Malicious code in sails-soap-link-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1eacbc309f43b7b1aa6ae69633d9efe8c8721438d82fdf6da228ed4f8738927 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189393 Malicious code in scripts-yaml-janus-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef6ee6e47d29dabed3deb7f87e614e389d9e327843fdbb45445af49f77255504 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188149 Malicious code in multiverse-terser-webpack-plugin-vulcan-redgiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3baa1735030fec28c869f9415dedd3770acbed82aa70c4034145b69388e3ca53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189301 Malicious code in sadr-corvus-janus-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 068cd6224c2679afa1600ed26617858272747c6b62a13b0ecf5889b1339f36ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190394 Malicious code in xml-eris-lyra-tectonophysics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f15351ff000357cf55920a6174c8fb220b1b8986f075040a4534a6af1db182d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188527 Malicious code in paleomagnetism-neptune-jsonp-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e00b7c4e427afdc185348daac0c7d3815042fbdb19ac15e8d7e848299230aa85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...