MAL-2025-189362 Malicious code in saturnology-equinox-cordelia-wavefunction (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2012d2ac417eb462ce8703bb345d9b81a93b9f662efa8b31c9ee85cd611fed7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186542 Malicious code in dendrochronology-test-markdownlint-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 367aecf6bc954214e27f286e5d8f5261d0c857e8add3e2abe083efdcd37cacd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188588 Malicious code in pavo-hapi-hyperion-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47751cb87177ae728651660085900b0615c3a7eb42d490ffb25a15ae74a4b4c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190261 Malicious code in webdriver-manager-ethology-kastra-biotechnology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4d50f3fa880cc105429f154e2bc09e5b09429538db303307688c9609ca30e2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190263 Malicious code in webdriver-manager-neptunology-oscillation-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c818da0d4724a5056bdb4220b90d6078bd9764e0642c6f267bb98ecdcc268fd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189096 Malicious code in readable-holography-buffer-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d383994bcfc1920bdeb6c04e589f3d6540567ed0a712462a7b20166940e06e7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188099 Malicious code in module-data-secure-psi-double (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0588a47bb58349ff90bb5ef1641bd09c9dcc5edbce002d0762474874d097c635 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190207 Malicious code in vulcan-quasar-prettier-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9565ba49afcf1a59bba550526acc4bf8556d6fb903b6c4f4e3ee0b7f79d2944a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188001 Malicious code in meta-monitor-info-import-final (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b8e3b673a01f373c6f1332b1fd04c1625680572cb0e3311bb3ddee22800a7ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185561 Malicious code in ariel-markdown-arcturus-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f906563d9aed4a7980a31a32bfc6ae14daf13ed46d446a279c6169602dc258e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185439 Malicious code in alphard-fetch-electron-builder-levels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e9630f529c3a2decf0296dc89c233694d4d75a41419bdca5403cc0224582f52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185761 Malicious code in bash-water-resolve-unix-error (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aa208583cc81c4598465e3b44b85048c1d4a747fe9087200fc8eabae365d5fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187059 Malicious code in fusion-ablation-cygnus-parsec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 675a39543d6664cc9f25d2ab04083977400a9d213cdefc19363fd94b3fe9fdc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188870 Malicious code in prompts-flare-celeste-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63b9d41dc415d07ac9a8656e3895a099dc4d7424b7a34ab8503ea5573f770548 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188910 Malicious code in proxima-dagda-tethys-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ea648e943b2437d64d35c4b74d17399f38b90f0f2dfd6e329fc14d4bd66bfd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189925 Malicious code in throw-bad-orchestrate-analyze-cat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7886aafdc1134f17a171cbf56c87c0a322e52665e05ce9712e28c73e51ac95a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188916 Malicious code in proxima-nightmare-postgres-seismology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dddb55344319b54c55a9c4fc70b867ff693278f587db1ce1fafcb3b61df7e51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189771 Malicious code in superposition-brane-gravity-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d9c82c048bb292bb73d9d46a6684296f3b4daf92daf54aa70d1879d885c4731 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188985 Malicious code in puppeteer-tailwindcss-karma-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d9679267623f6c6b49f81c8f19e9f271e992336207668f965e6348a4c9bbf98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185385 Malicious code in adonis-comet-sedna-geomorphology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 337bca060b6e0e2d205280cca27089440473dfbf815ca59cb70305a3995b1f2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...