MAL-2025-190293 Malicious code in webpack-xenon-relay-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41180387bc28be755e6160e34bcf082bef42299a422d7d567cf3db2bca891872 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190029 Malicious code in uglify-zeta-tree-delta-runtime (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c2a9aea8eab50320c779880a7b814aebf214304d7a582738f948d6c44cf0d10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187845 Malicious code in log-delta-daemon-finally-minify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dee3c60623b97e429fcc80b6f049ee4676920660b9fa79e897bbe356209b29a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185494 Malicious code in apex-titan-babel-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a01730205c12d694b2acae4ea9b3af03584b9f34e2f92fab62e45846ac5136fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186775 Malicious code in envconfig-protoplanetarydisk-dotenv-safe-isostasy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2892eb4fc40461d42c2bec88298e5cba9f2060177b8aa42e3bcf5b4584a481e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in development-warp-geoarchaeology-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c840035c07923c4175839d47e43684ea33f6cefb2879b9b69bc767d9eb50c71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185525 Malicious code in archaeogenetics-ganymede-paleoceanography-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 074f632db2abe61d259b3bc4c1f8b0dace7f1c727cfead5c4c2611a7642171c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auriga-postgres-fermion-filament (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab8e02ba82b0898bc0bbc8add1a4523f665ccee9221aa11a5577e629471b082e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in less-mineralogy-airbnb-tardigrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1e150649f9701fa8a91531cb8cfe5a7a8a65c99dfd46ea28f5561aad1fc5b44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gammarayburst-remark-boson-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 189eb1d8deef0058a6d5b3ebe8e29eea889830c8792bb5de6f7daaefece15c2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187871 Malicious code in loopback-tethys-airbnb-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60d6bdf3ca5ad069fac43e653c3cfd87b18d8ce52579123fb4fff1063304695d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188291 Malicious code in nightwatch-ophiuchus-request-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 894e22879845ad696f15e64f90cbac43dcd710f450574a8380386811c09f27d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187558 Malicious code in izar-string-command-neutronstar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dbcaeebf03806cb0ef5c609388515b241112b004e88e71aeee348b374f64a76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prosthetics-janus-cosmicray-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bf23841069f26bd310036a3ee4214cbe31bba389517fbaaf7c661280e69a65c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in entanglement-xanthus-lithosphere-lightyear (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 333e97682c5bc7ce007d488d37639394bcb23ae78a35b89704857c32428730dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sanitize-hot-quick-log-byte (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21b181ef62ba0365ea1c72e8ce33e599496c5c070e8fd9690785ab4e1121f5c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185530 Malicious code in archaeogenetics-xenos-telesto-tectonophysics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27da6b5fd36366bdf4dc7b0f00159a6daba029c6322eae8913d87161aaa6a6b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190388 Malicious code in xerxes-paleontology-dorado-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bbe070d105e81ca92bdfca6f8bf4a4d5c2018fbbcff99c7a74f916951732f5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185567 Malicious code in array-eta-sudo-new-cron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0a4d7db1a4925cd12f0d1da43bf11871460b9b935303fed31be0b2dea06c595 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186724 Malicious code in emulate-signal-psi-void-root (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7161863c004244de5cbff28eb8280d1b4c29469e0d59d63306be032cb0dcbea3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...