MAL-2025-187681 Malicious code in key-encrypt-bad-class-kernel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f34deec438e96ceca214bae93f61a23a54113b89535960b575acb32a4857fc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185822 Malicious code in bioinformatics-proxima-uglify-js-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b2714f42d0f923659472aa13696e78a1b29164f409010a8320d0433129c6c99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188250 Malicious code in neutronstar-hologram-volcanology-asteroid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e16c455d2bae43492d5ad9590dbe8f3ae4aebfbac806f385ed676a3856de3121 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190357 Malicious code in xanthus-got-telesto-accretion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bbac9defc7fbf4c08b122aec88f87e0ce104ee49d981074fef3a67e0b98cef9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186129 Malicious code in chariklo-perseus-chalk-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5338c7a76846e68332ded14ff77f20bddae227a163e5be26d6aa6cf4ef5eb266 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189562 Malicious code in sociobiology-castor-package-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e07b2b3e48f63280e2b3b47fe00bdbd1401a9b8ab4b8ce7f4487d3c8669bf24d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186782 Malicious code in epimetheus-chalk-frontend-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48c09eff222393f1709ec49ab01a7bc1a422e0f9747c89765ff069e1c9a61b62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185353 Malicious code in abiogenesis-airbnb-supernova-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b35d79dea66f1fdc77e0451d307bacb1912c7849f9e4094598cb136d4337f33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190246 Malicious code in wavefunction-ariel-pavo-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3912a524aeee27b07cbb82ea663ed0e11889501b10f31b17df11d60deeb0c0ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187947 Malicious code in materialize-repository-dione-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b82c43f714b10f67dce4baed55a1a1ee8189351c594660d8c8ccd7e9f6990d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186217 Malicious code in comet-norma-semantic-release-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32d7b6f4630255380dcea5a3bf2611344de910b5a96a201e142940f865f9cc09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185632 Malicious code in async-xerxes-filament-outercore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbc6163a409dce77356ebc5ac817d18a41dc29f36100b23bca2dd937c8af4a34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187063 Malicious code in fusion-gammarayburst-magnetosphere-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f8f77eac23d4f77219dc3dd38e3e9549d7347f9797f1f0094e9a201751610b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189853 Malicious code in telesto-neptune-tethys-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b60aa630590205ca8b7b9fd1a3f55a9cd33aaba2af30218049c11201e9a43c96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189406 Malicious code in sed-sigma-encrypt-catch-warn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a860b00b4fea2a38153d850c754e694e0ac14cc6a8bac156ef5bef91fa4290f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188398 Malicious code in odin-holography-wavefunction-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c09fd2453e24f48107fbf3d8ce34cb5c157911aa14bea9e03e3c6f7a6097ce7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188945 Malicious code in publish-alphard-convict-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b33c2a363ef96b131f8808426949e15ed28221d6374dc4b5c021fcd973e62636 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190010 Malicious code in try-import-fork-socket-beta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d6ff2c712f6685d9887aa3d5affbb9c1822f2fef5b030d92d8353d3af0d9510 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189175 Malicious code in remark-fornax-ora-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c243912e669259606e8a9f8f960ecc02cdb7dec0dbf107c3290c61dfef328cfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189950 Malicious code in toml-slidev-nebula-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acc9ce901d26d00fd31e986b417688de1d5bf8b92f291024badd653d3d19808a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...