MAL-2025-189003 Malicious code in quantum-node-config-quito-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1ed6e82e1cf063a8b078b03ac2d1d9345c6a79f7c0766fc60a9d447ce04dc17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185498 Malicious code in apollo-ceres-package-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 361a97cac0a8ce666550c7ace3fa953bb91e64481b6e65e216965363c50c3fb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187508 Malicious code in interface-awk-balance-epsilon-orchestrate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05f2ce4e85cc2ec7f434ad7f50ef8d6c39c253afdf7a7a04aa4a3ff2d93178e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186829 Malicious code in error-simple-view-public-float (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e47bccb9c5e1c28d4bef78850255f9937e5e7874e0067f26188a121d249b24f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188687 Malicious code in photon-darkenergy-mocha-terraforming (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6ce42babb790cecb786467b5307818ca1b0a573a280616ec3b158591c55da0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187568 Malicious code in janus-chai-umbriel-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eae71d4b4bac5709c08900c6dbd46fad9585278dc80a7127a29f8304f29d18d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187443 Malicious code in impulse-eslint-config-zenobia-octans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deb5c240efb3880d55b5185feb76739b337d22f572cbf7af950b4f7b7680179e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185638 Malicious code in atlas-nanotechnology-polaris-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee962c55a593e125945858bddad9512cef3f2fc632fdde81c10a6e934f126d9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185579 Malicious code in asteroid-cors-bulma-paleoclimatology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c757cc0677aa2f8229baf844fe4422f081113cf652d25c7447e2ed6db0fcfb16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186922 Malicious code in export-hot-cold-orchestrate-awk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e29679a768cff74bff87249c600a87ea07ac325f73af6665e836040a9722c178 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185454 Malicious code in analyze-signal-bundle-query-mock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e9ac109472152832caa800b02a3b34b918e75736ec1e24c065add9391558992 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187360 Malicious code in higgs-ichnology-paleoceanography-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 448734a11e1e60f2e814de6f5a2cec7155b838543ad69631c37633d80f4e0f78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186984 Malicious code in finally-notify-table-orchestrate-sigma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3d4ecfd3ec9e536b6f5c276f6a533ced1d24590a4a00d5d059c241e6c2fd05e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188059 Malicious code in mira-halley-halley-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4d654ea2429bda07d6516d7e6c195f982a2f1fabbcd309bcdf070a02a7322d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187892 Malicious code in lyra-nebula-node-config-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71da1d08ee103264b969b081db8fc81219689df4fcc9605329c81bbdd888fe5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187633 Malicious code in juno-eleventy-prettier-stylelint-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6a310c6f44311b90b0c366863dc1251a35c2ec6b74bb4561c289bc7facabed6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187741 Malicious code in lepton-cache-soap-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 540a8b1aab1653ea9186f5db7ed0ff5ad6f8e7fb307f940830c94da18ed1a149 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190013 Malicious code in try-stub-yaml-query-awk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64d7afc6d4f0fe68228645490da6a101c05503ade1edbaa923ccc4560f7632b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189963 Malicious code in transform-command-cors-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec1e5fdd3ff42bdb4fc326565165f244de82f2ff60b02bda4c9ec28c93e9da73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190385 Malicious code in xerxes-koa-promise-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f7f2f61998e11d01a86b314c656f657f5b480c9796ae6910da2c471584dfafc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...