MAL-2025-188470 Malicious code in orbit-zenith-magellan-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ea800d34eda6ec15db396e27410644077e675f01e4972c0dff9cda67740ff49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188458 Malicious code in optimize-theta-process-cluster-dog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb2b3e9d3328a363fb5b4710efab7a9851461ed3577869eae397a170f5d2476d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187802 Malicious code in lint-antares-luna-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b0795e430f9e9aba719b3b6a20ccc0a64f2fccd57f1f4a9b17108037f6fd87d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spectron-commitizen-server-jwt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f5520a0221162a9daff8f9fc7fd1859cb9e5017d1fa3d3de33024e017fc173a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in transform-command-cors-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec1e5fdd3ff42bdb4fc326565165f244de82f2ff60b02bda4c9ec28c93e9da73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grep-emulate-module-assert-chi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c75466ab2e6d7a0911b9994ce70e2bfe94d442f610e416ddf1214d0dbe6ead6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186220 Malicious code in comet-perseus-andromeda-terraforming (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48aafdc9143f2f03e019398a2f17e8554586833012e56e2e3ea753d55afc6471 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186297 Malicious code in convict-private-cors-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ace10051a820256b1feb41cfdb500d090f5eb7eb32135cb711b558c71818aada This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189952 Malicious code in toml-terser-webpack-plugin-process-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 108235f2670a8c48b92eae1fda9fbf2849586da19df4677671f9ef5128bb5219 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187763 Malicious code in less-radiometric-hydra-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abc59368ee0d7cd8aeb4f95689e120819ddbfff2c7c82266ca7fb17267e694aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185442 Malicious code in alphard-mui-gatsby-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cb3005addfce76c80633ae60df973892cc0a170579a5315c529dcf35c96059a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186176 Malicious code in cloud-water-old-moon-wind (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f6319ff7b420cb0dd56f67db0f75f27c89f1cc43360a9ca664fd1a8b8668b4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187992 Malicious code in mesosphere-nanotechnology-got-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c51ddaebeed905bd3e4d2efb4932a9094e6dada95ad1d5541fb3cc456209d2d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187481 Malicious code in init-venus-sync-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41b6e40d812a9363fa5f719d89f8033b005cc387fbeadb50dac11ca6fcd9ba44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188536 Malicious code in paleontology-saturnology-standard-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4555dd27e7e62780ef0984d432fb6a5e16fac735e5253883450924af4b600a6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189343 Malicious code in sandbox-scale-promise-unix-resolve (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9ddcf410fd06e2ea2f2269a667bfebbb5ab12de14aad2c9f47ef13f257ca503 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186572 Malicious code in development-antares-xerxes-membrane (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4362fc9df795b9d7cd12a02041fd8a23c9956574057cd907b59e60ecca9a9ebf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189075 Malicious code in rain-final-bash-bad-resolve (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b36f7861b2c5a32da3cbd2d0cb30c946b3f8a373dcf16159ed8af05069eb8dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187564 Malicious code in jabbah-umbriel-io-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7df36b162f8d91918755f7eaa032fc52d97c8082a66c80df6541a3af2667c629 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185456 Malicious code in andromeda-impulse-quasarjet-elara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e410a4fcb58b2811102f923002858586bc7bc659b7f0faf932ba2c0a1456af4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...