MAL-2025-189201 Malicious code in resolvers-query-comet-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f32d247fb9e7fef3137c36bba9f109b99a98b0e64d2c7664eab01c964c650d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in leda-cassini-dactyl-mongodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2202684f09a6fade6cdc2675dfccee158706ef464f4837c0be92ef6e5793e07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187834 Malicious code in local-astro-inquirer-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcd3727aad6507bf25f15d7e399ff05fed2cdd7bb502e484039078f049b94ced This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188879 Malicious code in prosthetics-leda-mantle-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b02ccf110939f33fbfa2672f6cba59b7579228e554de159d0d913b20d0526171 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186879 Malicious code in eventhoriz-event-planckscale-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a969531dc342a3106319fd93ac645317db9acde1778df1db5647cfd186fda89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186994 Malicious code in flare-backend-jsonp-orogeny (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06640d76332704792e5098c70eb8c3d1552602cf276e52392177510a7cc3a1b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188871 Malicious code in prompts-jasmine-wolf-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c4950e6676dcd08c2d832364db96e59567d89ab3b4af075fb7f3fc3b563b84a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188052 Malicious code in minify-kappa-proxy-kappa-tau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ffe6566fc5c2b06e8b71c81372166626f61185204af858dd2c9b8ef190fa287 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190339 Malicious code in winston-polaris-rollup-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50b576fdd56ff9baf91a0925f161f1f9f2f899f976ae949c93d85a8c5008e76f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185458 Malicious code in antares-aether-run-script-pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c684055290ea8a0fb0bf121b028e590d03ce3cdc6373f64d5b9c922cdee2896 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187073 Malicious code in futurology-aurora-express-graviton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d09150a33d0cd50a26dc4d3bd21db4685386b647c7a4261be0ee5d3aa92dbb48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189273 Malicious code in rollup-plugin-loglevel-archaeoastronomy-on (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ae1d18ecda3a4a15013d21d522f0598cfc55b2f622436d4550842dd4870a5d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in good-minify-private-container-object (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b032c4996d44ce62c30eba2b2781375d7b3c99daea21c2cbf85535105cb6269 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189129 Malicious code in registry-quark-barnard-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8be35985da5091690aa56f84416af345aa641a6b98c78446a0a03f371a4176d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190082 Malicious code in upgrade-async-forever-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75caed0ce1fb98070ff3b33974aacb7b1939cc7108213d2042323c1aa276575d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188705 Malicious code in pino-pretty-kuiperbelt-vulcan-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d01b3bf19da8542bfc975fdfb7a80d55b99366b0702f190de1439f1a90fa5fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186275 Malicious code in config-darkenergy-heliophysics-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b3f2a08be0835c663a99803c2a7fa6298b462438acf40f200e42fac09cc218c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186294 Malicious code in container-void-virtualize-transpile-try (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a878e00673222cc404285759beaf06913e6a3ce1eae06386bb4225210e21bf4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188731 Malicious code in planckscale-ora-envconfig-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb106b457d5f917ba8c7114dbb5f21f91e8bfd4bc12332d92ae52143d6d392e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185469 Malicious code in antares-luminescence-phoebe-higgs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9250c08aab5a952d64b8b3d1497c203806cf0a3da77a0aa075aaeece4362bd64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...