MAL-2025-187474 Malicious code in init-charon-terser-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3508eca342f082f4e63f5a94b88316894ac60ba0b8e0ac588455e64488807bcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186499 Malicious code in decode-authenticate-final-delta-enum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c5332fae3d3f2e74383dc62999e6522bb2c951f669ec62dc5b8e5cffecba079 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188886 Malicious code in protected-reject-decrypt-bad-big (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dfcdebe8a06399cba0d551e3325ec3887aa38ca3c9716354f910f7f99bd5f24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187579 Malicious code in janus-radiant-avior-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3482009acb57d79c98b331584817b5b1aa0eebce9c890bfefe12f45ffe90242 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188827 Malicious code in private-enum-compress-upsilon-omega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 487ece3448f08f70c5b2da4031eff0deebbae4d9f304ce3cc6cd1338fefda9b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189215 Malicious code in rest-paleomagnetism-eris-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e0bc402668138cfaf7a98c94602606b2e89444223aeb567e96a42bef52c285b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188692 Malicious code in phylogenetics-fork-tectonic-cosmology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20cd04db7ff79d34415c4910ccf5f498e218ce9c415f6d4a1e893027ad764142 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186014 Malicious code in cassini-markdown-pdf-fork-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7856ca00a922b8839ecce049dc630ed44dbd0a8584596ccba77f6f9b3415101 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185681 Malicious code in authorize-signal-report-omicron-decode (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48d8ba11d8a4a4607c7f53061d2de0abe671593a7676068b13d46e6f8fbbcc09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188166 Malicious code in nanotechnology-ariel-atlas-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 726ac8d50d2a6fb517f785829fa5c9a3f25bd010388eeaa6547b9f90cdc68a42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186493 Malicious code in data-virtualize-cluster-view-phi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 936ecc613606a259a3d77f4c7386303bb0f2eed7f53fc811c049c825c25778a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186067 Malicious code in centaurus-superagent-spinner-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91d406ed50d97258b1c60ee835ae0350d359b3f8576bc1a5411d4da722d37cb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189208 Malicious code in resonance-middleware-octans-graviton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9970ca8ef6e7f17379376bad34acd43e416abc3403acca977d152258ab4811af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189408 Malicious code in sedimentology-ablation-meteor-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89630c41cfec74f2f32cc931b82d19ac766f0283bbbd3b649bb05f33e57956b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190237 Malicious code in water-assert-file-data-emulate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e69423b53686e8392d907d9f13a1e7d65043fdaf6751560fe306395230586b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187413 Malicious code in hyperion-kastra-paleontology-magnetosphere (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2d31eb3cd862886d18136d81f8bb0cf91c2c741c8992f6409480b516a287b79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187238 Malicious code in gridsome-slides-pipe-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d3041ecadbfa1b9ee20c448a9f21b65c9463e9e394b9f82d5a14402dab7ac41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187915 Malicious code in magnetosphere-procyon-neutronstar-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9acfc169a5b8fa5224c2fca025041cb29c7867fff0692c1c961fc225cb8743f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185650 Malicious code in auriga-parcel-soap-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbe5b1c35448ad73eef103c3a367ab3cbf211d6af7d8138c9531cad4d079c357 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185610 Malicious code in astrophysics-triton-nightwatch-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 024882eb95974395384f723bf94e85f20340a0c83bb457d8fbd3e4576f104b7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...