MAL-2025-188806 Malicious code in prettier-plugin-markdown-mantle-hermes-geodynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 080a6094cb7884375f29aa9c5e2b1692a4e86007d59d0244ff7830c5fe19973f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190307 Malicious code in weywot-webdriver-mocha-loglevel-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d10d243add4dcc6bc246152c76b5cf2eab5692efb2dce0904e83bf7400760b1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187592 Malicious code in java-short-string-java-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d597eb3065711f0aebd72850a6455f97fec66df5b0b7ebbbf9cd4342dba73aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185405 Malicious code in airbnb-ariel-spectroscopy-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b19845f065d4c024064f3ec180048657e93ef017b2ffdb1aac5409b028db8f1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deimos-polaris-gridsome-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2d7daf5a58341775641235bf8ae1045625d4dfe06b3b0772252ddf9a2d15bd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in janus-dagda-query-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afb85b42a5c537dcd9141514d6280fb515d53ef44c3e7801ea47c15aa7a3fa71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in csv-dysonswarm-aether-optimize-css-assets-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36bf85dcddcc722b3f545730fed6924d3f05fa5adac9e83f9ea4111f99186498 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187787 Malicious code in link-astrometry-gulp-transhumanism (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4329a95dcfa0e1622818152248a41d94a3ba730de57357e0fa2c4f82e5e2950 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187371 Malicious code in hot-thread-cold-fast-epsilon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c05ed2faa72ffc66743755809b61ae158c8a76189298f711ee7005be644c7df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187203 Malicious code in got-paleoclimatology-nebula-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c594bf125d3e98c114785d243fe86ffa7d25834160d19bd9debc56f1fabc9f4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188927 Malicious code in proxy-meta-pi-theta-bad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d262f7cb74cbc02a73246c1079e373c3cf5e367f400f9dcfb0c987786b01dc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190057 Malicious code in unix-execute-file-route-reject (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d68b960e530b4d83fb85ec9128c0b09c044d524863710059518465a2c086801c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185705 Malicious code in awk-minify-minify-proxy-omicron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1208fc2ae9856f039e6e138fcb07fbd979361c684b17686c6b35f22247a99bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189437 Malicious code in selenology-zenobia-loglevel-prettier-stylelint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d2c2038273686ad4e4c976e60b166c18b1148952183ab5873e7216c6dc12c25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185874 Malicious code in book-sanitize-cat-cold-class (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e62948a3099c031b544e79f768e8afc9967412595d8f9b895397d21f52fb7404 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apollo-ceres-package-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 361a97cac0a8ce666550c7ace3fa953bb91e64481b6e65e216965363c50c3fb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in async-psi-alpha-query-theta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7530cf46aad481c6839f10e0bee406d9caae82ffc06acdedcc54ce75442b73cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187142 Malicious code in gemini-postgres-rehype-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 835234f600dc962131b0c036e7163ad52a55b2eff7514f87441427dbc9a88dae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186160 Malicious code in class-kernel-lambda-void-try (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f07d1b6f4250bc7debfa02f88d961108d6e01a100297ae64122870d4c9302a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190484 Malicious code in zooarchaeology-configstore-google-darkenergy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 685650e6cfa174e861e100212f50881c079171023d9a1a82afaabbba16bc6127 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...