MAL-2025-190076 Malicious code in update-hadron-rehype-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f35ece84680d14ee5b47b141f5563546aeb735678836ac5514467735a7ed72c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186792 Malicious code in epsilon-protected-reject-parse-benchmark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35e2002f19bc3435a3e86a887d2655568e319690d4a9b1e37aedef4be186df3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in toml-jwt-docusaurus-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7137e5c7ace789bdd6841a632b7672fbf80556d0ed465fd3a20160f1b2d3d500 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189238 Malicious code in rigel-miranda-cache-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f24d18ebd38c79524545d193434c68697eb21e47a21abb2e7f108ae969d00566 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189648 Malicious code in standard-kuiperbelt-neuromorphic-sedimentology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6813ba4210065b547d71da8618762bbab598598fae2265b0e054e998d3bb2d00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186146 Malicious code in child-process-stratigraphy-subduction-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e7c49dd3945225b658c5a51f33c18f72ccbb43fd246685797fce72947468f0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185265 Malicious code in tunis-kit-gahi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a84de994ae4925e86eee873c3e8b523aae9ac07745ccb7ca2ee9b2f086cd403 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182109 Malicious code in gocay-uga-agidugaufyi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9ba8ff76d9956eff5cf480bcc04f4746194bc9e0d91b4c7cae6d98317af6e1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185239 Malicious code in soniec-kat-icfaffad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ab9b75d75ac1456e111f4b0b35f265ffd962751bd27a0d8d23ee6a24c09d856 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184502 Malicious code in moki-nik-hifdagh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d019473dc310698506fc41f2bffebfc643b56a5c19788d985f63e04ac9b2a2cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181715 Malicious code in astam-ifut-dakia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40f88bdae107f6b9405243475b97807fe4f3518c565f6318e65e55f972d94012 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182083 Malicious code in gocay-gua-visojfahi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90d5d8668aca964900b5ae8ae56f4ed0b1995e2561e84578d8e21b009b31aec6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181418 Malicious code in baso6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c01a65223eb44d8759a2d8f5521ff1a2a66aa5855286f6c3d47035d4113813d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in roti44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ff025389ca146405f547de88d3f7696dbfbcf7a7642286a60b1a799494491ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in roti11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 694c1616f49fd58fb03c27620a8f54fcdc6c492cc843c39b09f5e8d55e2bf482 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179906 Malicious code in lookingan-jeje35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0bb3f31bffb9c3e49785bb6146e2beda7255a8588b791e225211ef22628bb79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-parlub (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0decd21a301fc2bfd3effb61c8824c1244cd7678312cc02f887b4bdb854b482 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180039 Malicious code in teate-thy-py-bazew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20c95c79184e48d9657c3105e344d8f2108328b6bd4e3614ccad50997412bf57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177694 Malicious code in polymer-afia-ga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61a1e2632b5303bb5cb2dfd37b6e82d5ef0a6731d9a4d5133d05f3375798f107 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176162 Malicious code in miusan-fa-neraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97d747e0127a1d128d1734c256924bcd09395dde903a4a76ebdb85c8f71e24e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...