MAL-2025-188988 Malicious code in pyxis-blueshift-metalsmith-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d35b14481cf4830287c5d9e4d6a2a178a989b10fec0b5b95a622eecbe4ed1820 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186225 Malicious code in comet-rehype-transport-entanglement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55f76cda7e3ed87a43e6e01759a8df12b7cdc8c0be725210b3f7a49e834137a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189931 Malicious code in thuban-areology-event-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55ec620b28e4ddf5c67a236718d01388f9e7c1c6a69ac3547201d98f5651b95b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189259 Malicious code in rocket-got-heka-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 778e69e1b6a1c981f67cb6ad0fce677345c087976404dfb27b70709dfe9619e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189986 Malicious code in transport-registry-slidev-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2660007516964d3692e02aabbe87172c23d0b68035f75d6dfe2d597e17f4948a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186135 Malicious code in chi-error-kappa-shell-error (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d52be924692085514a7ac69e4324d76070a96c0a3599cbe5efcff36f82206d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186779 Malicious code in epigenetics-graphql-tailwindcss-abiogenesis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bd945513f752e172da155108dae68cb71e0aa8ee82dbc96af971f7560437f08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186957 Malicious code in fetch-blackhole-framework-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca87a7690c36b00d254fba308c33d5b8f5b33b233dd068fd9d21ce353684569f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186887 Malicious code in exec-local-mongoose-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b872afd1ac291d4ad9a6557070b1a111c63c386c84d16d9637c174bb6e04f49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189992 Malicious code in tree-function-kappa-decrypt-assert (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cacb380e1ce93ad7d45f252a5f9858b2a29a47775e53ec4c03d4779cadce49d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185812 Malicious code in biogeochemistry-xenos-nashira-petrology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f82fe21385e7e511f088a5163fdd58d197f1dfb485a1f949ee04b4b14cd53d4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186743 Malicious code in encrypt-cloud-boolean-double-mock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d51d8521f0c86d79f842859e96a3e5519e5aa8368916c9b28ffdd652c6afe78e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186616 Malicious code in dotenv-parse-variables-biogeochemistry-version-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1d3c97f89cf63e178ad70c22fd8f637758e020a930ce7a5f812b784f9baca16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188951 Malicious code in publish-magellan-magnetosphere-paleomagnetism (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fee2dc3ceeab278bb8c4c5fa3312ad51340599245bcdf8b5de8eeb28e8d9bce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189520 Malicious code in sirius-react-bootstrap-ignite-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbc6dcd2d217e217d0b5ccb225e7f9e203388db94165fb0a422d99841f2ce048 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188175 Malicious code in native-callback-prettier-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc0dc311373b2931d044adb4e40d0af9e1e9bf640554855144ae6aba8b393488 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186274 Malicious code in config-dactyl-foundation-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5de4251893f8cf0b528c2444bc8aef33307f0241ae32247dcc74b1eb4c4353bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186112 Malicious code in changelog-middleware-koa-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daa17e71d0659ec9eba2081fe5d20c537b2421455d8e4534a085af5fccaaf246 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189553 Malicious code in soap-comet-adonis-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ba309579742e145eec67128cd1726f352994bbc24340da2452433bad6350725 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185429 Malicious code in algol-elektra-rollup-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e884f188f0ed525cbcd2add351774639fe52d4b08ffacb4abdbf7b7596483a09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...