MAL-2025-187522 Malicious code in io-mutation-eslint-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45164c7dc6e9e0aca6bece375bafb9cf7bc338835e1beb1fcffcc5c140da59c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186986 Malicious code in finally-validate-spy-transpile-scale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9042f0ca03575eae11d95191fb56e4a493c9d9cc6f78b44ff5664df90a5eae0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188448 Malicious code in optimize-cache-static-orchestrate-import (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa661ea8fe97761367e0b2fb10ac18b163380643bf7efa070ae42b2ab09d95a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190261 Malicious code in webdriver-manager-ethology-kastra-biotechnology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4d50f3fa880cc105429f154e2bc09e5b09429538db303307688c9609ca30e2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188176 Malicious code in native-coronalmassejection-writable-bionics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1beef42edff0c4d0221d6f38cf659eb78dd577fb905abd1606d91630eeb3a3df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189322 Malicious code in sagitta-shelljs-halley-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c27d14c78f0650cc9e36a6a09704b5376e65f49f575b3bcc650e67f28f0dbb37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188406 Malicious code in old-grid-permission-gamma-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e536f38f9d7318cb83d2c050cb34a8e1c0efda5109e56d6701c3335ebf74ed16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190141 Malicious code in version-aquarius-run-script-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11a84d38a922a954fbee7f9e56c1959385eeb12bfe9493e598a5dce063b254ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188984 Malicious code in puppeteer-rocket-bioinformatics-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b951132b96da10142462ea444c50d30aef2965745f67f0b123c553520f7c232 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190233 Malicious code in wasat-foundation-webdriverio-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efd9a86d6be17cbc44f9dae6883bbba2e3a38738aaf80a503bc35aa86bebe5a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188916 Malicious code in proxima-nightmare-postgres-seismology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dddb55344319b54c55a9c4fc70b867ff693278f587db1ce1fafcb3b61df7e51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189867 Malicious code in terser-rate-limiter-xanadu-palynology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a17a13c04a5971cb4246fee444cc08d23000846a1ac3b1116dcbfded9d002347 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185502 Malicious code in apollo-ganymede-algol-impulse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6884123d01cc47416990accc41d7ee9a8c0181cfe461bf7c83149d09d680ff4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186140 Malicious code in chi-short-export-assert-execute (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b9a5aa5e0c64e003069b43ff89f71a2a040569317baf9e7ba44dbaaa4ce5f97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189689 Malicious code in stream-yildun-bootes-neutrino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44feb90e525ec1381552034b9dc1728345a6d643d0c8790072c8a233cc41e200 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186511 Malicious code in decrypt-xml-compress-moon-file (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd29dfb05cee6c5ddaf5d6fc7511c903cc2572f128025c139bb45606c8a4d1af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186297 Malicious code in convict-private-cors-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ace10051a820256b1feb41cfdb500d090f5eb7eb32135cb711b558c71818aada This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187709 Malicious code in kronos-pipe-delphinus-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 960c07082250d878b37b3a5f9a803c37008c32b0ac7d9deefdf8bc4284a2bc8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188274 Malicious code in nightmare-jasmine-janus-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fd20f4768df0374f9f8cae260d09775d2e0445ccce5d3ce5630d9857463bac0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186625 Malicious code in dotenv-safe-pino-pretty-terser-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6e64067c125d9b3d36e5f8917125b76d88ebdb21d3b049d689376067d521878 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...