MAL-2025-189033 Malicious code in quasar-promise-kaus-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 041ad73f1af79afd5f9b6ca0c4c7ba14072a32c0a2b16fd9c8af00d6bf033c50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189349 Malicious code in sanitize-new-link-code-void (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ea502fe1787665ba66414467f0d22ea7bd53a05d1a42ad35bb8974b5d525531 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187401 Malicious code in hydra-lepton-interstellarmedium-entanglement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a5b0751525d924128f7d8f3f75bc81175d9c822a4d589dc97dbc03ddd75c01f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189395 Malicious code in secure-compress-phi-bash-orchestrate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4452d7b0255f5bfde9306684c29b815108b9f682b2d753820f2f60cabf2806da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186260 Malicious code in compile-validate-sandbox-node-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdc4473c74d323ab1478cebfa6f67c5738a3dc065c1c5261534dc58cc730cb86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in debug-char-code-double-encode (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf04c663a92261e5204471a60b4f4195cd06203bbc747e721e88d638e35efbb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in private-abstract-optimize-view-rain (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bb70db1790bb65e64e2974752452b944ac058868f9967bdcf6799ccfa1ced5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mongodb-augmentedreality-mineralogy-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3f125e9f5b7b51b74000fb6a510f37a0230465a3aa6c95b2cec228ef2193f3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spectron-pegasus-interstellarmedium-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b04eb1d5d63c9f3aabf811cac6a6ce9455d32889b996253d4c4aad321324328 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tau-import-file-bad-byte (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4109c4388178c46ba55b1c77f6875170c704f0586b730e075dec134b695d713d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189420 Malicious code in sedna-shelljs-tailwindcss-photon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a5705ab9dcb1d6154f909da22e40f7e97327537bc2e24903cc8ad7a9269aaa1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186112 Malicious code in changelog-middleware-koa-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daa17e71d0659ec9eba2081fe5d20c537b2421455d8e4534a085af5fccaaf246 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185801 Malicious code in big-data-shell-omega-reject (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1244a9ab9c9072bd2cac6a3da7e782a4d9ed85476bd01eef9825f23de4c7478f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185410 Malicious code in airbnb-oscillation-commitlint-config-angular-palynology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baf800470a1681acff5740acba90cbf70748786015854f1268ff0cedb463fff2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188010 Malicious code in metalsmith-xanthus-react-bootstrap-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c249cc1d9495c472c96febcbb4aa5275a3ddc5edcbc067eb482c1e37aa6b7cb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187019 Malicious code in fork-lightyear-commitlint-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abac3d062ea3dcd3ec025e59c52c1aae54d1282809da77aa80fe4c6c4b249010 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186990 Malicious code in firebase-helios-bionics-virtualreality (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1022ecdd26947cec0f0053fa453beff0e4313b5d2fef4cee8a9101980dac690 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185712 Malicious code in axios-astro-html-webpack-plugin-algol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 254ab7bbc92a7c4b8dfad0eecc86af73b9b16e8d10411f1b91d9dac65b41f1d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189132 Malicious code in registry-ursa-prettier-plugin-markdown-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bce70a60b982911ae8463ded8b5a8cfc5578f573075e24291265f231dd7d8f9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189909 Malicious code in thermochronology-gravity-commitlint-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75579a959d026eb2c03145dce2aba38b593b3073d09b2b1efbd3643c2b07e8e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...