MAL-2025-188659 Malicious code in phenomic-resolvers-node-config-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e565c694b415096038d77c3ecf84a24cd71b41b9f9c5e458046f05fac551d916 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189752 Malicious code in supercluster-vortex-blackhole-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a840cb750914a2d75e4627c09a5d65fdf3f78ccd08344dfc9f366053fad4d11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186453 Malicious code in cz-conventional-changelog-blitz-steganography-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 730ff285678049eb66e80db3988bb6718e03f59c281d112d5768eb338419befa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189179 Malicious code in report-easy-fast-star-grep (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08e344a2c581a34f772f67b04c94121c2f5eac9b9db0669af25db99e4c58e086 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185688 Malicious code in avior-quasar-comet-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f81365f9fc5c2f91505f735b8c2f870358d8ccb4640b6b9d0b2904e54506807e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187874 Malicious code in luminescence-colors-resonance-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b436ab9ff3e8151563e055e479bb058c0a0e3b067ceafea6f8f597b6542fdf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188075 Malicious code in miranda-koa-fetch-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0542faa9fd01fa72c958cf46a1d5a08f0ba4db727709a088052187230321c063 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188780 Malicious code in postcss-loader-hapi-publish-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f30a4b6ed232f3a0f88e9b315c00447a3e16a47c406a885a51e8efb67a3253d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188449 Malicious code in optimize-css-assets-webpack-plugin-pm2-lyra-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 741161c1e5697b9ea2854e1e99a994a7948792bbba257c3d30130fd110051d4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185822 Malicious code in bioinformatics-proxima-uglify-js-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b2714f42d0f923659472aa13696e78a1b29164f409010a8320d0433129c6c99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186909 Malicious code in exoplanetology-comet-mira-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6dc4857a09d7da4d8793951c39bff14b1eb9b1e2b75cce02c23c2c1dcd8c9ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188010 Malicious code in metalsmith-xanthus-react-bootstrap-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c249cc1d9495c472c96febcbb4aa5275a3ddc5edcbc067eb482c1e37aa6b7cb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186339 Malicious code in cosmicsilence-quasar-vulcan-gammarayburst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 866755da032f89e835ad4dcc205c1bb514c50448977117637cdb00b19af44d3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187556 Malicious code in izar-mini-css-extract-plugin-hercules-nightmare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6536a29dfab966492b09b2edeb0b4ae69f3011304e1a35a5d640f66472abbb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190330 Malicious code in winston-gridsome-oortcloud-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db6bfd77d9dd95c84108659afc62dfad4e071d33b38b1e7b726038c0e49792b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188240 Malicious code in nestjs-luna-meteor-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dc02951e53ebfa9301168eba0b7c56d46b25e61f53253199174afa594b15df8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190178 Malicious code in void-exoplanet-ganymede-geodynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c9a2c790225f2e208964e0a25bd71c0f64b5307be9ad53a6361c7098f046d5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189585 Malicious code in solarnebula-nextjs-start-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a158f05aded8cc14a93cdd7ddcd71a02ef799b562af59a0981fea88e286fb34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189635 Malicious code in sqlite-oauth-quito-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07ca71d4114f8ae4468c127def1828c69d2b57565bf13761cb5938f72ffc59da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189798 Malicious code in tachyon-lacerta-relay-mdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8741edebad7eec01082ae61ad292f9f73ed7148cb75ac77435d0c139d964f0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...