MAL-2025-190419 Malicious code in yakutsk-saturnology-grus-prosthetics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4961efa46f325d6df30059ba2e89e8339f33108b59167bffb87a28292d67154b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189880 Malicious code in test-book-final-epsilon-char (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 705fa95826e8c9052b49c3e15d57712ea0539ad61c99740eb3298fc3f6319b2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188768 Malicious code in polaris-solarnebula-equinox-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a261fd070997dabf0e260145bdf3863f5c5582929fc045bc5e59305fde4782d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187220 Malicious code in greatfilter-greatfilter-kastra-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6aaa89df8927946010667fcd1917704d7b1e9657c9426eb3b312c527b34c8896 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190116 Malicious code in ursa-readable-astrophysics-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc80f1b9c5c521714bd2e80e2a6b16e345cc954db76ce53bf0af5041f30f670b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186219 Malicious code in comet-orbit-umbriel-thermochronology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44ebd8148bd5f35738b7a83182930c3eee2f0343389f023bb854c42d9ee86047 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189968 Malicious code in transform-robotics-filament-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65dfde16dd768ac14d658dcc5d9aefd9d6e5e79e6df9a61fe8202c0c895d6480 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186604 Malicious code in dog-water-double-sudo-export (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 906ddf53c560d51aa1c3e031e98c594086bb6c439d83f948122cda4fc8f6ccd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187885 Malicious code in lynx-nashira-heliophysics-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43a45c0b6f2ad44fec8b8cd437328119eff54f462c614ebca18f5aa3de04082b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190438 Malicious code in yonder-mineralogy-ablation-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0650f663599df30ee3a2fc300f5a88b7bf4a1cd8203f2410bb10acf99ced98b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187858 Malicious code in long-module-report-abstract-alpha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c75fc5f13dfae551ff47efab8b84afe20fe478cb03f51553888aa3114d28fc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186472 Malicious code in dagda-ophiuchus-koa-solarnebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d59370b60f2bcbd1ca331ddb9e242a52c610a109777bc6254e561aad327d81e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185622 Malicious code in async-iota-pavo-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c1b1f4251a47dc183f09a26f155bd0931ec87d8606fb9177ab5ad1f58112403 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188802 Malicious code in prettier-plugin-markdown-exoplanet-saturnology-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5035fc7034177361a11d4b4e27a3fba157faed7231117410427c76e9eb30a1e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187801 Malicious code in link-user-awk-bundle-throw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13af1c15269c3456ca5cec6d14a4862505a34f1cf9fcfb6c89f3e739db65abe5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189275 Malicious code in rollup-plugin-optimize-css-assets-webpack-plugin-bootes-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a22361096be70425abad1a7efd5cf9876ee3807f16a6b9935376c78fcf0a8d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189441 Malicious code in semantic-ui-redis-dendrochronology-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8d86fe46479392a59ae1b6014000b1675286c6ae85a50c9f04470b1d5626df6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189597 Malicious code in spawn-nova-antares-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9165a42167bfaa2160397587a1d764f3ba2df9f596d3d7bad89d935d99800188 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187361 Malicious code in higgs-markdown-pdf-kaus-helmet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93ba62848a1b93975d8782477b6f4ac21636b1cd955646b801e68e663f18d5fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186135 Malicious code in chi-error-kappa-shell-error (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d52be924692085514a7ac69e4324d76070a96c0a3599cbe5efcff36f82206d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...