MAL-2025-189859 Malicious code in telesto-typeorm-google-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b173f96bd85516b6815087b4c7d3b8f70dc559d0196a8296afddfef6961b251e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187235 Malicious code in gridsome-interstellarmedium-private-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc35853619fa48c454f34cb715f9e8d0ccd26fc433fd0366423d526d7580bd78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187696 Malicious code in kinetic-upgrade-pino-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 742650f379653a3093a99f5335ba2cd25cd4c67f9dd90c26b5adb849eb1de6ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187663 Malicious code in kardashevscale-despina-outercore-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0de6b9990c28eb85eb681e249c774309fe5af020b547772d4a804dfc7fc3e99c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186026 Malicious code in castor-warp-asthenosphere-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35d58ff15ea2ebbd7c4324613137ba93e2574de45eda32618575677a0d8de300 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188729 Malicious code in planckscale-augmentedreality-relay-planckscale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5f998a78e0845bead33d6caedda7cd51aea9b95c228d8eccca9940a5fbfef87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186453 Malicious code in cz-conventional-changelog-blitz-steganography-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 730ff285678049eb66e80db3988bb6718e03f59c281d112d5768eb338419befa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189420 Malicious code in sedna-shelljs-tailwindcss-photon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a5705ab9dcb1d6154f909da22e40f7e97327537bc2e24903cc8ad7a9269aaa1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187443 Malicious code in impulse-eslint-config-zenobia-octans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deb5c240efb3880d55b5185feb76739b337d22f572cbf7af950b4f7b7680179e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185781 Malicious code in beta-grep-cron-omega-validate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52a7b28f9b754e69ce8bc73ff34806e5dadea1d590ec27f52ea85800891c06c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187830 Malicious code in load-integer-wind-byte-key (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae40c494ea7661ddd611225e387ea5d15aba899bd9ba2b4d2a09251d6fd7a9ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189330 Malicious code in sails-link-update-glaciology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c565b4c6d9dd5485fafd3fce71a661cbee1ead7dd64f7bb8d20006fbbcbc76e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189310 Malicious code in sagitta-antares-winston-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ddd0b309f243a59e5c481a498f75eb1c403e12809499a7c5b5fee2a091da4f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187959 Malicious code in mechatronics-borealis-tardigrade-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e651931a0daf2cef9a1b2da12b3ea1df680bbe83487eb4a9897a63c3722a27ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186710 Malicious code in elektra-xml-grus-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c8f6f9bbaf6c31fa6c66d4f459eaf167a741ccc0e66e0a22a5941bd34df4e5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188231 Malicious code in neptune-terraforming-commitizen-phenomic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffd15125e8c1240c99c49d55043b1c295bb37c7620ec8c2e54627a6d174b5d6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185911 Malicious code in brane-venus-betelgeuse-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 558276da0386c127016f30005da101fb0864551790dad588cd551158b91bed58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189033 Malicious code in quasar-promise-kaus-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 041ad73f1af79afd5f9b6ca0c4c7ba14072a32c0a2b16fd9c8af00d6bf033c50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187188 Malicious code in global-upgrade-wolf-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f36eabf70e6a0498bc947c1d4011bf05f67eb39c3e4010c7ab28a2b04e317f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in socket-mock-java-rho-spy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c73783490d318eb38b0f589f800124ffffafbe09192fd2fb01fc5ce1f82b4195 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...