MAL-2025-189075 Malicious code in rain-final-bash-bad-resolve (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b36f7861b2c5a32da3cbd2d0cb30c946b3f8a373dcf16159ed8af05069eb8dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189872 Malicious code in terser-webpack-plugin-centaurus-version-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3c5c34ad44ac941803db664d6a785fac2fd342500558c1c26e98ba07c786178 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185545 Malicious code in arcturus-magellan-bellatrix-quasarjet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85706cbfd581fad81dabf70d7a7a10ae9b714ca2c7b392c8337518cb0800d8e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189539 Malicious code in slidev-rigel-uninstall-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 369f65bcbf5e2d48d9e17b9296807921545dc9a753ca7caf4e9eb9308cc8b5af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188129 Malicious code in morgan-sass-loader-release-it-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c153eb6fd6cc614dab9d8fd43c3d5a0e5258e9ae6ddd573ad103e2a78cdf4f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185990 Malicious code in callisto-hyperion-norma-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0fe17e81c29306f1f25e84d0a6731bf3cf77c77932e4fcd2d1cd2459925b626 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185371 Malicious code in acamar-comet-flare-robotics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df4fa443fc219b32a649b7258c7128b38d90c7010b81b9625f2459c8b43d2a4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188331 Malicious code in nodemon-css-loader-husky-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef0c6f6980a8e239fba86b499d7e58efed539940a9b4a001da5150da2f24d7b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185850 Malicious code in blazar-quark-publish-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6051df5e76609f10fbecf1f58e20ad09d8098ec4fed4723d9a81bca13555b27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187300 Malicious code in heka-antares-vulcan-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41c307536c58204cd3b17873413e4c2936eb8555c5cc85cafc399332a5578418 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185712 Malicious code in axios-astro-html-webpack-plugin-algol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 254ab7bbc92a7c4b8dfad0eecc86af73b9b16e8d10411f1b91d9dac65b41f1d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188338 Malicious code in nodemon-vega-umbriel-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b9d4a5c58194456c1863fd6896596e284d87a27db073c2d3776cf9a02526de3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188238 Malicious code in nestjs-css-loader-command-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aadc9bae2c451c458228c585830c85a5ab63f5a358e31b3de37b61fa252b4550 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189275 Malicious code in rollup-plugin-optimize-css-assets-webpack-plugin-bootes-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a22361096be70425abad1a7efd5cf9876ee3807f16a6b9935376c78fcf0a8d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185384 Malicious code in adonis-child-process-pegasus-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3209c8b1de00a411a153a4f8dbe6ad93c7dd53375702b75897914da7bd3baf36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187921 Malicious code in mantle-private-mineralogy-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7a10c0e697099de5b3529186316ba2c99a82df570459a1161bb7f18e5ecc9f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185979 Malicious code in callback-saturnology-taphonomy-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14fbd4b65a544c4345a86ae95f502ce7e4b540d7a506ac9c0060a2b0fd806de6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fusion-postcss-loader-supercluster-biohacking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 400dc4a5c17ace9f40ad7f1fd6da92459fd78712491da86cdf24cdb0f3e04ad9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cz-conventional-changelog-stop-readable-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 409af1f40cee40b2159b3a8d5e2b0d4416b25c8e18bff01a890829e0bb75d7af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chakra-ui-ethology-biomimicry-superflare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ec1a6bd4839590111dd4aee2301174b7baaaf80bc633899c529eda7de74071c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...