MAL-2025-186209 Malicious code in colors-style-loader-bellatrix-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 547d8fda9a648ebadbfa1ec3f1e54327c81673c236c51d0f81f375194dbb596c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188941 Malicious code in public-perseus-zenith-blitz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1e0fda9529023a9e7ae60ebe50dfb049b2ebe3a6ca123f31ad56a1ef6721213 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189406 Malicious code in sed-sigma-encrypt-catch-warn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a860b00b4fea2a38153d850c754e694e0ac14cc6a8bac156ef5bef91fa4290f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188773 Malicious code in postcss-ablation-hercules-darkmatter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25753e25bd1732a16cba9de270fc57866d28ee8a4b6c4985dc4c4245b0f07225 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189924 Malicious code in throw-async-object-public-integer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10aa1d7a7d6befddd3451e86b4c9d3ff5167678967dcb13fa5be0d980ffd643a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185394 Malicious code in aether-pulsar-polaris-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91d89cbaa30e7fe600859577ad2f26ec0d66a81fd877ec655c5d214083593fbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189941 Malicious code in titan-luna-luna-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98d1efe8a02e5a0cf5767bf942f74baa1ba82ff3d393560c1d4740ba7a5bc1b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186748 Malicious code in enif-blitz-selenium-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6263d90a50f469b364498e2b135964186baddc756040588a3c53724888fa7b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188632 Malicious code in perseus-selenium-lepton-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9bfc1cfbb199ea1ca3bb90c697618a7d74ab51f4a88a59c1319771b74755a06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188888 Malicious code in protected-thread-cron-integer-alpha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a8a54f3515cbdff294501d3b30177d1f4b221d5540a7178e1efc0fbbdc57b0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190039 Malicious code in umbra-jekyll-foundation-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c106822cf8e3fa26d502751c57e0f20c137335a06eaa078c6724cb7fa72d9938 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186755 Malicious code in enif-zooarchaeology-jovian-extremophile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12bfde11491b202a9ef0e7d59f6c037b33c4a718db17f3028ae3c1c5a5ed5e0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186425 Malicious code in css-minimizer-webpack-plugin-virtualreality-ignite-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47ba110c672d536891660dda1ec49413f5e7a6c719c9586868aac72f13acdad0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190335 Malicious code in winston-leda-mesosphere-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c55ac0c1e1677bbe795f58c9d6316ea72e59e3380904b89eeabd1a4e3609525 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190344 Malicious code in wormhole-gammarayburst-nanotechnology-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6173007b055d80b43e6ee86ba3c832ce5faa5be4113dba6fb9c9438b48c896c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189307 Malicious code in sadr-passport-mantle-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfbf90790b787c745d7ecc3df9a5bb266126009d229135095e2d81322087b872 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187012 Malicious code in forever-iota-callback-vulcan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2f60f3a13bf834da1f6e7ea40da360ca3b541224c8dd928490733f69f44b927 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190111 Malicious code in ursa-mui-rest-xerxes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a71a493d110cf2e7816f24eef54463d089d4c2e0edc6334e41d45e9665c6334 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187967 Malicious code in meissa-ethology-centauri-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e6774ffcd11a4066195a9f84a607d2f890cf53790c5453023adadb6b0b46724 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187418 Malicious code in hyperion-terraforming-cli-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 139f22bb319881877ea250018776f20d2290205a8ea094dd1c1fc3e84dc1083a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...