MAL-2025-189181 Malicious code in report-good-error-user-parse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e72c93e97ff1357de0fc34488e9d23d0a8ad52b71977cde7e0ac0a8ea5dc92de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187332 Malicious code in hercules-config-juno-void (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f4cd30f00323af7b524f61b17219f21295d6d27272c1dc39765553c6d27266b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186820 Malicious code in eris-sync-loglevel-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eceef989feeada3339ec402d1445f185a3b004a1f1c1c4a71553971739a38d8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186912 Malicious code in exoplanetology-grus-mdx-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ea31ec52f889b7920874ca91182d58e0b0d8d1ab58207de68d3023a074c7896 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187761 Malicious code in less-pavo-restart-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66a129e765e40e8dce28ab9e4ec2c9ad3d9c0771c06a7bc9dbd4186cb47a879e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185783 Malicious code in beta-moon-fast-authorize-deploy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04718f9575365342a95b182394e3faf16985b0f54304fe8408cb783b9ba9d07e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-safe-vortex-meissa-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90fb944cc269795d653356deba7764bb80e34801218d14654f3434c39296c5c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188971 Malicious code in pulsar-interferometry-singularitarianism-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fad5a7f738c28a6e7ad5fe6e30c4879f10f4e777f865b13d708e690aa51800e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187232 Malicious code in grid-mu-cloud-signal-cat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cdea576c0cd2686520489649051a2de7c88148b728550acd1d2f5516422c9f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186229 Malicious code in command-bootstrap-exoplanetology-paleontology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff1c98741dac0aaa20ffdd44166754eaab39b72cb59265ccace7177c3ad5cb09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in link-loopback-hydrogeology-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da395659e113c0159b3a1ffa62f95566815334d185057840f3d59b3c5e74e71f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186943 Malicious code in farout-resolvers-photon-blazar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d346732ae56c4ef8f30df56341cab640ff20f6d532c8da3b5709ae69820d5261 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in innercore-biohacking-aether-inflation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4624518d19df6decb94a7fc1c16a63c38a1ad699a14920802872453db27d850f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in paleoclimatology-cosmogenic-crust-kardashevscale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00e15ddb8489db7af6fbf7562f37b8fc6a58192ece39405003e76501af3efbeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jekyll-less-npm-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dbfe23271c900f951f36875d53f77f39ffe4fd6d1d97cb14618347003c907cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190369 Malicious code in xenon-comet-xo-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 052d305986eaac09c0a7186bb66c0d5c0c3ab65f1a3b1b59a8649f2412ade857 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189542 Malicious code in slidev-webdriverio-geodynamo-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e40b8ef2ca4a1c55c75b881b2d9d0b2cffd2b53d5be554752f1411031b944caa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188466 Malicious code in orbit-library-blueshift-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ebdf3d655aead94a3e9f83afb5c3ff14cb54c3f368930deb2544037a51e40c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188942 Malicious code in public-process-wind-debug-view (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ea636a7e3c1a51019c949018a9314e3ce0b0c56b8da96ba2cb60538a3f50127 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185859 Malicious code in blitz-materialize-link-lint-staged (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cd6558b44eec2954b20bb99ebb1a7e8e455149631179d6949c5569bd11e1822 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...