MAL-2025-188585 Malicious code in pavo-auriga-jest-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2636dffbcb00a70df12da05821d52ea1134e1edf132ee3bec849bce1eae714f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185701 Malicious code in await-throw-psi-simple-debug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 937c92f1846343ce1e7e08ff398c3ef8339757e31ea3f856fbedb5d32b508cf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190090 Malicious code in upsilon-decode-catch-log-function (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d0f728a55c388778d0b6ad28ccfe8a52b73fe5f721ab54b852d2982c0211dd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189658 Malicious code in start-io-nightwatch-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06e2d1c8c06aa9ace0532a0d3a61dbaeb3cd2e038d997fe0f7dc80a93fd3260a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187820 Malicious code in lithosphere-buffer-jwt-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 969f5c74780f468d81215b74596c5c5ed356350b8fc25c5ef462e9ee0fe85b18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189811 Malicious code in tardigrade-mini-css-extract-plugin-nightwatch-blueshift (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eccd2dbe37050ec44770db072262af063d90c8cbb1f901cc4ab7337d91745c94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187232 Malicious code in grid-mu-cloud-signal-cat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cdea576c0cd2686520489649051a2de7c88148b728550acd1d2f5516422c9f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190041 Malicious code in umbra-octans-ablation-deneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b8978bd923183b2f8c2adeb260b1beacf5596db8503a689fa02d4d665279a18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186154 Malicious code in cladistics-crust-blitz-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c316f4e58246fa52759b2c006660c1ca9ee997f2706fb365c7d763fa3baf2b7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190149 Malicious code in view-object-promise-xi-table (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e9385f29155a61233a2bd59a79bcffabf2586fec1e93be8a46e069aa0cbcad4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187811 Malicious code in lint-remark-meteor-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c7f5550866ab3d3fd105f2aae894229da93014e2557b2fd328e2703ba4f12a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189438 Malicious code in semantic-release-aether-buffer-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ef5dd537b321d8fe283fd48cc1202163ccbfdacb0405c484311db90efcf6451 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187080 Malicious code in gacrux-betelgeuse-package-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6169441db67c1ad514453675544949307be78e6e2a8931aecea6222e243212c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187314 Malicious code in helios-centaurus-juno-lint-staged (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 929260b67680ed0507a691726e1f4f84a5fb3205b6e1217e1356966bbbfa20e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186229 Malicious code in command-bootstrap-exoplanetology-paleontology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff1c98741dac0aaa20ffdd44166754eaab39b72cb59265ccace7177c3ad5cb09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190370 Malicious code in xenon-command-futurology-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 158f275577a92ca7d58cb9a4b4c7aa49ec6dbed8cde8af11359b407b295ce232 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186936 Malicious code in farout-colors-hologram-mini-css-extract-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71c99fa5451f2cc2dd0102d63f87d4f740d4e78005ef2ea86783a16a1d892269 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188663 Malicious code in phi-secure-deploy-air-finally (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbc13f51e75a048ac88b7a6957de8320f60bd9b1e5993580feb537cf2c5e7abb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190015 Malicious code in typeorm-indus-restart-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59684f7e8948ef45ee9558fdd7a6b3e81cde5aac0835af604702b99536f71930 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188923 Malicious code in proxy-cache-beta-iota-water (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62ea476eadee6f737a5d5939604779845fb47a080e38fec660f39ad6b1e818e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...