MAL-2025-189958 Malicious code in tool-tailwindcss-cosmology-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 024cbd055f4aa386cbd24118ce725f651db3fc425f37acf6453c7e535d8d1d1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188578 Malicious code in passport-nightwatch-sedna-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 590d2c8ef0713d21221fbae7ee5e08dbd5bc8bb6d9956061ea4aba71ab61dc4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189785 Malicious code in sync-hugo-xanadu-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e3adaa46632173918f3b95958281e988fdc380ad8e4bea12ca6d766fd818429 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187305 Malicious code in heka-markdownlint-rollup-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3918091bf1dccaa7a82585cf98bba21f487de7dad3e092c4d5f4c7b1b3c7e9ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189193 Malicious code in resolvers-auth-materialize-ionosphere (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a77a2105b820e7a74ebe25aa5cff24fc525b061fa0dc9bb60d1675efe64168e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188084 Malicious code in miranda-spica-sails-superposition (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5de2d2d4bb18d6912f4d329e98ed29551bd2849dadaf44dbd9da3ae52faf7e38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190068 Malicious code in unuk-loop-mdx-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 295429884cb23c05cd22de2b6bb4cfe7d99359296b20883aa2aabebf7b820b72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189346 Malicious code in sanitize-eta-promise-error-awk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e00d20cc45b0c3561f876e2907c05759af75b6ae061f01d2d3240a3aefde578d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187516 Malicious code in interstellarmedium-nightwatch-bionics-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95c3950e00a83cd6023444b37bc9fbf0afcea3d67a13c01a62c8fe4212ea7563 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186926 Malicious code in express-buffer-quasar-reveal-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b57194e111538f98b9fa0a9a4608e20901da6e8c1d0755d9b65444908296ba03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190421 Malicious code in yaml-barnard-jekyll-magnetar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 647bcb1618cd7231944ee6afbd42020458061895e8490b3d485d6225634c630e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190021 Malicious code in typeorm-xanthus-solis-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bb5168a960f3e3d393108ebcfe184344358d5a5de8bd0ebd27903e2f4fc0ccc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190331 Malicious code in winston-hadron-neptune-biomimicry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6c7c8ff3d5115b179dd8ecc42fa8cfa84c09be7c3cacaad80ec7c33d30a7ba0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187769 Malicious code in levels-lacerta-entanglement-entanglement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16642552a6d597c86591a4a1cbb8f43b1ad3684cde6618a09349b8f72810b1d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in remark-ceres-version-chariklo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2fb52c758ce5e9d99a04067da85ab9b30625f2bc45fc74782d8190a83db49eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightwatch-levels-lepton-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6bc901157dba2a0f11bcf68e5429ef2be6851012441f8d6b91565d140110d93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sedna-rigel-package-xenos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b74aa10afb22fccf556586d4350aa1831e973a396137a512cce8a0fc6cede946 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aurora-nodemon-whitedwarf-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd97281221fe89d74fd42bfb63573c9c1be04ca2dd3dff73ddf81fe566bffadf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deploy-thread-scale-omega-enum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a87bf0eda5ba26e9b22ed6cb71824a794660d45672f51d2db436756b3e0edfe0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in string-index-dog-abstract-simple (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0af2d6d92154eb01c8b45b503a35405d1411364034f103800c56b39d2cb0a2d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...