MAL-2025-186988 Malicious code in firebase-command-ursa-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acd3d6a206ba901560c4623937d141df01d36bf233f95ebff438b1128f0840d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190203 Malicious code in vulcan-asthenosphere-babel-exoplanet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0dda41e2e382a5cfbb82103d57a5d91dc0d320161ecb63ec8d14e8e0f27cd2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189186 Malicious code in repository-heka-nestjs-mesosphere (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 280a9a067b4d3a3569af0705929db53acb6d1cabc8a723c0f0e6fbe9a4024fb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187868 Malicious code in loop-webdriverio-vulcan-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3f9d3f3f64e3dcfb01546c14df5e1d0e289308f7238bf5fb36f487b9e92423e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189851 Malicious code in tectonophysics-transform-crust-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 362c7a3c2a387c1b0b23c2ad16e0ff6e12215ac224b7fe3f752d831110cf1fcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187502 Malicious code in integer-optimize-alpha-byte-authenticate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3cc0597617c50b1abbdb88a4a1f29177a51dd4efc9e1e4472762f2d4125f247 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190073 Malicious code in update-astroinformatics-technosignature-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07872498943c814fce0f1daf16b83559840c78b50781df97768c53a52faa9bac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187951 Malicious code in mdx-coronalmassejection-tardigrade-paleobotany (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 492b299ded7916b85e77ebb5ca4a8466e7e4e23589a665e40592fcb3cbcd626b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185618 Malicious code in async-eta-try-balance-java (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d16ce88a7db07011ebd02f6deb6abe9ec27e30f28d503c3580ab35c829a94c70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187807 Malicious code in lint-less-loader-jekyll-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94f459bf148cb91c899d7aac0403072e50f2ba7547640fe1ac3cebbc1d9607e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186297 Malicious code in convict-private-cors-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ace10051a820256b1feb41cfdb500d090f5eb7eb32135cb711b558c71818aada This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190454 Malicious code in zenobia-quantum-yakutsk-superflare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5b7a0791f6b5f95dccbeba085fd172ab4e21e61722e6d0b80572279f26615b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189986 Malicious code in transport-registry-slidev-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2660007516964d3692e02aabbe87172c23d0b68035f75d6dfe2d597e17f4948a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188293 Malicious code in nightwatch-restart-corvus-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 877c94f83337eb1f8226da3f2d8366612b91dd7661e18dd8f821748bc5a2bee5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in route-permission-grep-quick-debug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8522859c4db4d599c66d98d969c343dd68f5f7793b0ef4885860c6f1705ca7a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186394 Malicious code in cryonics-jest-tachyon-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e3e71ab2321b00d0c7b701888c94349c5ce8a4bee2d5dd85f7edf844271d669 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189731 Malicious code in sun-bad-assert-secure-protected (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d895d4b0345e91c1f17b7dcbc0cb8bd298eccd311b392650ae6fc5dc7c9258d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jwt-jwt-nodejs-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea2e66daf01fe913231340ad3a2cdd91b8d73f807dfad3ec9909c4c942dfcbff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188889 Malicious code in proteomics-electron-triton-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fc38110ed40ebd893261af27643229422bb7c0c76d0a9306749997e8f876c73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189460 Malicious code in server-carpo-carpo-cosmicray (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e13b35cab92cb87cd2a1275e1e555ba5cd6cc2d672f9915764840e26cd51e296 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...