MAL-2025-189234 Malicious code in rho-water-load-info-mu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e14f7985d79c2471901d930216ad13686fed9538a20e6f305ed6922c2116b68a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187088 Malicious code in galaxy-cosmology-remark-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ba9738f114ab057949e61e21d3c77d487480f1464985e0f8438d20481f0d2ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188661 Malicious code in phenomic-terser-markdown-archaeogenetics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e13a9d7b5e5952c9e0e3739c59d67083e0e9be60d192f6c9be7f735b5ca17d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186742 Malicious code in encrypt-bundle-test-deploy-scale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcaefcbdd1ffb8c51e8f0e7b02fe563dd40e979c5d81f3dc6babebe9775f54bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187151 Malicious code in geoarchaeology-archaeogenetics-spectron-webdriver-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d023e09a2edec33372bcdf7291dd928ab241ed4aa9f81604743121eb2b4a57a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187473 Malicious code in ini-quito-stratosphere-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80addd4c113b2cc5947537311ac67c987723ef1ebcd79a98f25b63fe603be5e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185487 Malicious code in apex-aurora-xml-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd7d0a68560ea990b728310621a54435d29f21a74d08f8126b4956b41fc0234e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190243 Malicious code in water-omega-compile-pipe-book (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c384897424d689290428902abecc2d8b7ec9bf3b44809f6125a0e31960c0223 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187594 Malicious code in java-socket-cluster-decode-catch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91f9d43e44408d07d0519e14906a4ab844a8bbdaef97555ba604ada50af6e13d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187810 Malicious code in lint-nuxtjs-babel-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a8611eb2223c19e3229ffc9e93992299b19a837631cc58ec018759f33681b70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188425 Malicious code in on-eigenstate-eslint-plugin-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61020121bb5fefbd87e738daaa5fa258f3218c907118b301862e4333a537ef1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189186 Malicious code in repository-heka-nestjs-mesosphere (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 280a9a067b4d3a3569af0705929db53acb6d1cabc8a723c0f0e6fbe9a4024fb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189748 Malicious code in supercluster-filament-cosmicweb-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38ef3c54e4785f181cf7c10d8c75738e81ad775e2ab94caef427ea09a612add9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190155 Malicious code in virgo-async-astrobiology-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e656b9f20e0942219d52184b8fc5ea29dce1db22e46b4ed79b479c6566d1bbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186958 Malicious code in fetch-charon-callisto-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62550fec98515505f3376660a176a2b13482b88711b0022c9925a9b825e4fb36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188809 Malicious code in prettier-registry-forever-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c9bee273ba762279ba30203b2a54d467cc3b01e489006d55110b49d433736a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187765 Malicious code in levels-convict-json-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6438dc827ab933a352eebaba9c7906df80e3c4db8cca52f437cbe79dd92c0688 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186527 Malicious code in delphinus-paleoclimatology-stream-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d619d01df637e0ed08a8b5b8184ba8a98b8c2e150823265edee3ebdfaf9a7c8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185970 Malicious code in cache-umbra-geoarchaeology-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63b325ee42e9c4fb0b6333f6448be22adc3ef9fa102f3529f68c8eb58d077bf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189147 Malicious code in reject-book-catch-module-short (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b8b14b5a95ce44e95fff509182c83b828055877000a05d9e7b4447abe77c430 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...