MAL-2025-190404 Malicious code in xo-halley-less-loader-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96b37dc1940687ac22f89462e574c1e94a104bb168b0c8d2da912aebf30896e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186046 Malicious code in centauri-filament-private-on (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9968ceed719808ac4dcaa5e26867b53f8872c78312d60daa13cfc6c912d09ea3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186090 Malicious code in chakra-ui-ophiuchus-sublimation-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44f618e732db8d3ff69334d6194da83ee2d0ecd8d2a83ac60310bfeae1aa6068 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187366 Malicious code in holography-commitlint-xml-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2eb59ca534b23129e0bf53a8b51be5dc5a21ab32c8f17d2cc49aff38bc7718e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189046 Malicious code in quick-serialize-small-bash-delta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83195472b40596bcbf33039302c5a9300ee72e68e9ab21557558e15d8f28a353 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185948 Malicious code in bunyan-radioastronomy-interstellarmedium-outercore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83cc54e68d097377490b89849ea3a8203a0b8b2af36ff8e9b2ab0361325f59df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186927 Malicious code in express-cors-dysonswarm-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d813d65a50244ad3649baaef287695f9e5c9fcf145c42566664a40f4d368e4ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185884 Malicious code in bootes-reveal-md-cache-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cb7748dc176d64edfdfb72e752149d9195e91e117f7347bc52da30c4b3bf009 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188150 Malicious code in mutation-augmentedreality-archaeoastronomy-neutronstar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d350f2ae2d91b828a2e264f7f2d54908fc2de495a298a5dc6b69b023837e517 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189318 Malicious code in sagitta-protractor-taurus-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 266c9e23d1090c912eeaf40a4ae1dff191771a30ef3486e1591a591c9ae91aa6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187856 Malicious code in long-class-report-grep-catch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c531eb996fac38a8cea19ed3fe4e78e127323d14b9f80d1cd2edf596cad55e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188245 Malicious code in neuromorphic-venus-aquarius-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87e9c7f34fa7c528a1ccd96c62a29363407f96ea1bddaf382b494a7a3b5411c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188422 Malicious code in omicron-short-water-easy-beta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe1dcdfe4a6ddfceada517aa147ac3a3ae9554745ebbefbe636b7fd0618a482e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187400 Malicious code in hydra-hermes-ichnology-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f806ffbc0d1c5c2ac9366ab01274cbf1257aad32af0d5554332dde5e7d2e89f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186377 Malicious code in cross-env-atlas-non-blocking-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c136167139e7da8f2dfa597abcb7ee932a4d5968c1f94382ea87cc5b9e43128d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188433 Malicious code in oortcloud-zephyr-kinetic-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51b32d3835116fa51b0ca9e1a21f2e8ae7dbce3dd0ea885e925e6b8237c337bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187876 Malicious code in luminescence-pino-superagent-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca44ea655f57b006cd3f79aed4d56a7f533cc6dc90375b078867d19ed03bf2b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186880 Malicious code in eventhoriz-futurology-event-chariklo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c96777a755a8d3822d329b2a9e85b002427023d67467caa7f45bb2d7653b76d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mysql-local-bootes-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c64a6dec662b35954b462c22e6a5bd9d14a5452fd7ee1386da7b709d78a68442 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tectonic-pino-pretty-build-elara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c0bcd2058f31fec7229382d839c7ab77d7171eb0c186dc44476d099d33ed8b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...