MAL-2025-186972 Malicious code in filament-tethys-brane-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fd79b06d69f04ea8b0388bfa6ca124a65859009529152dcd4cb8413e3089e76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190239 Malicious code in water-balance-serialize-omicron-deploy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10b645228c86dd124d31b5de28c55a401743d95fcfde72307326120b67d14f46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186970 Malicious code in figures-proxima-sedna-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92d0b9329c538d56e5c03a9784fb71627128b7a5d0af3687c492dcdac386fa18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aurora-nodemon-whitedwarf-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd97281221fe89d74fd42bfb63573c9c1be04ca2dd3dff73ddf81fe566bffadf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189405 Malicious code in sed-shell-cat-encrypt-parse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dffcdc4ce5b51e0f06b29e455b78cb1777be3131adce3dd6db51c4bb2f860476 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187705 Malicious code in kronos-ichnology-dotenv-safe-seismology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6c772d9ee172d9d8a4149b89bb7e9d6739711a4032f4fe5a817bbd35ea114c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in beta-enum-notify-view-stack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61bccf3f703fef5887b6554bcd18352453f796633476d23cc246ea564274a9c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loop-webdriverio-vulcan-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3f9d3f3f64e3dcfb01546c14df5e1d0e289308f7238bf5fb36f487b9e92423e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187965 Malicious code in meissa-avior-singularity-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56058434ea05e4b11404bc54a0e547c0c81bb85ca6ce5d07d2906dfdcad9beb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189289 Malicious code in run-script-australis-quito-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42f23afb76dd834950908db36270f132db3d2309a7d62c3f676096e347dfccdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186162 Malicious code in cli-aldebaran-geodynamo-jabbah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c946278b1818415c17fe6f89c3436056cb57fe062c7a16cfab1f2a58b9db68c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189588 Malicious code in solis-chakra-ui-comet-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c944e50187a88c0aa55f68b8a6f137dc34aa9a7e65fc342d26e2ab27158f1c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190104 Malicious code in ursa-comet-cosmogenic-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd11b0b7a1927f924e9836d71f861f050ea05f975ce2f6fb00a09cfe62d5135f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186420 Malicious code in css-minimizer-webpack-plugin-framework-nextjs-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f30f366708cef8bca649ed0d2111bba2e06d274b44d3c3ffe7f6ccc876441e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190331 Malicious code in winston-hadron-neptune-biomimicry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6c7c8ff3d5115b179dd8ecc42fa8cfa84c09be7c3cacaad80ec7c33d30a7ba0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cluster-tool-quasarjet-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77d3dfb3f3920e3a072a4e1193a85adde9b2af5801f438ea99da4553b52e6154 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189435 Malicious code in selenology-dione-envconfig-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58446230808fb30c9c6d9ddd433a5054ef4d641b42fc35972fa47ede2fec4431 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187893 Malicious code in lyra-taphonomy-fusion-exosphere (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30607827e4a44c0862bedd788a86ca7e751a17e1b53d4cbf6b813e174e0cfba4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prettier-meteor-mineralogy-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7db2695a262bc6e69c6034c20bc2c7d9eff61f2b332c8b08bb2467def0f247e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in halley-paleoceanography-mui-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e1c18c06b50e272a459781ff344e0e72fb6cca19422c4940dd8a9f7d835cb9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...