MAL-2025-185976 Malicious code in callback-jekyll-public-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e37871c5d8d32001ecc33cfcef2b8297490b122f158b68496524289819179f33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185975 Malicious code in callback-fomalhaut-slidev-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6530e7d524ba18030b212aec51ecb2bc02efc16da675b6d3b84232396518dcf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188837 Malicious code in process-passport-eslint-config-speleology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73f3afed2efbe84aed1b966215535f2da5ba01a01ffc79f5b28b8e3b28fd6332 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187004 Malicious code in fomalhaut-jabbah-telesto-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c409db8add4aa2d4cef18d1ff2a7a256965f5f053276d7ecb0d2dae9c3d2ff57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190384 Malicious code in xerxes-coronalmassejection-flare-filament (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3eba865e2a9d624b3c624e257f0dd29415c690c76db7f860ba2d9d5944ad28be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187661 Malicious code in kappa-pi-nu-beta-lambda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a6c3f70765ab517b21664813a98844d67f2c4e9b170198fb4e5114b66fb9283 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187915 Malicious code in magnetosphere-procyon-neutronstar-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9acfc169a5b8fa5224c2fca025041cb29c7867fff0692c1c961fc225cb8743f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188686 Malicious code in photon-airbnb-virgo-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b57c86807e608c5b48c721b687275aad0c86c57fac80d36be0425e26e2fd6085 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188484 Malicious code in oscillation-leda-warp-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4034a7c18a9c9766f734ef16d4eadac9e3d3574d8910068cacc02e37e741318 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190447 Malicious code in zenith-geckodriver-rimraf-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d36e1b47c6a8e5dea570a5dcd3fcac95ca35a52c52436517afaf66ceb9522d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186671 Malicious code in easy-kernel-deserialize-public-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1c7f9693c4ee4fd27e0d30c8a5e7c70561a199ab73f1468b17ef1596d9c03dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187428 Malicious code in ignite-jekyll-europa-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 816aa5bd2dc7b19100deec4058a3379694413dd83819569d46871cf95c7b471f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188301 Malicious code in node-awk-resolve-dog-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb1468df818feeb3957cd3d617fb7772a20f5a04b3a5b7508a13d5e6f0396452 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187028 Malicious code in fornax-castor-saturnology-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48e2d13718c7794049c943f0ed36bebb078dbe4020cdf2819ec9c778bf684e9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186556 Malicious code in dependencies-nova-meteor-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 501435bf55002173c8f7d5b4c21b3d56892072239bd53de9e1caee62f283e9cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186291 Malicious code in container-encrypt-kappa-virtualize-old (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f797b4a9f89f991872b9512b2adfc5ff57180b4e3a26fdb86bc508e15a96a1b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188886 Malicious code in protected-reject-decrypt-bad-big (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dfcdebe8a06399cba0d551e3325ec3887aa38ca3c9716354f910f7f99bd5f24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189841 Malicious code in technosignature-wezen-blitz-blazar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e17bd367392dca319922695da590cbe880e13845c7f4e45ae2229ab21915f867 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185692 Malicious code in await-file-public-transpile-static (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca4d92450f404e35fd817bae135806fa94dcb54c32550ee158787b91f54f8b01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190442 Malicious code in yonder-webdriverio-lynx-blackhole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfbb715d4acf64ade15a47fd3c5a01c86a6a1ba2777dc7bb8b003d084a247a51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...