MAL-2025-189962 Malicious code in transform-carpo-charon-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9df721a1d001a47a01827b2556b96ff9d55853def17552c84f1c6e05a3172c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189948 Malicious code in toml-jwt-docusaurus-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7137e5c7ace789bdd6841a632b7672fbf80556d0ed465fd3a20160f1b2d3d500 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186754 Malicious code in enif-wavefunction-phoebe-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5529fe0b8e93a9c6aca887f4acba242427e40e99e7c53ab28047e01d9aae23fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190047 Malicious code in umbriel-leda-pipe-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbced70f13ff299b1492268d064d3da9078e4feed78b8d6225d5a2cb765ff9c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185426 Malicious code in algol-aldebaran-cressida-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3b60a5310d40da64667cf3c540ac5e0f72654d8b7b2fd03a830545547d126ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190158 Malicious code in virgo-framework-dependencies-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0409c65db6f8bd311bf6cb439379b2c52dc1f8fc0a7ab975a69106943fe4e47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189936 Malicious code in titan-despina-zenobia-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae5ee25ca20a09d9abb7fc1a6d770bb3c601cf9ddba8f4d1880abb62fee026fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189388 Malicious code in scripts-jabbah-apollo-phenomic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b5ee5da379e5c309f399f54e4cabd154042bb01dbcf1183ea02d2fd6c98bb71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190309 Malicious code in weywot-wezen-cryovolcano-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 151eea28ab25328885136b6b5a720bbf53cbfbe5d4fe9151c88fcded1befd164 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189595 Malicious code in spawn-exec-zenobia-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08d195fec77b588ee50726619249d1d77aacd06b4a03966370f3dee0c6edc02d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187827 Malicious code in load-abstract-final-static-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b89b8ec8cc2029f323602737983cd24b79fa01ca5928af6beadf253afb737938 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186501 Malicious code in decode-info-new-finally-new (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3950f1595598eee2e1fc0c8562e4c8079ca413a304be306695f1846305db67de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185751 Malicious code in baryon-antares-leda-cosmicsilence (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf008fa0c59cf2a2efbee43d63306487f972657743488c6054ff09cbe33d202b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188537 Malicious code in paleontology-sedna-enif-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5223c733e49b5580cabd03e1467ed68395961b95f4b6b336840f56f367bf98df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188054 Malicious code in minify-permission-xi-route-export (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b61768cd6c25dd7a0cdd37434af8d09fbbf3143127384b990e81de835efd08a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190358 Malicious code in xanthus-redis-scripts-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5378a4c2406d3bf5d4a642721349c3ebe3396f5805ea6a6298f597ae191792cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189975 Malicious code in transhumanism-registry-nucleosynthesis-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1daf5e4ae2dec9f262e8832dac98bbb0596a495ab9b2645f18ab32d77ec623e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188196 Malicious code in nebula-await-paleoecology-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97b549d90567ac211cc5c3b056b1542850ce033df28ab52a5e0600e273d3a9dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189028 Malicious code in quasar-backend-altair-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35756d40a25a4bdb4052a566e3b66b63592849244ddafa63fe0a0df31a150e39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186994 Malicious code in flare-backend-jsonp-orogeny (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06640d76332704792e5098c70eb8c3d1552602cf276e52392177510a7cc3a1b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...