MAL-2025-188609 Malicious code in pegasus-xo-charon-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 181224c30ecd7ac564d8ca1c19e9898a3d4893ef3135055451b9a6683c264f9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186103 Malicious code in chalk-soap-eris-mini-css-extract-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9dfb806249dbb13adc7a707fc35469c24fed0c44496bb851f9c5dfff3945dee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188159 Malicious code in mysql-enceladus-cressida-whitedwarf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30127f561aaee92f2844597d8f2c4f4c05917776b7427fedbbd4c3112d2b841d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189748 Malicious code in supercluster-filament-cosmicweb-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38ef3c54e4785f181cf7c10d8c75738e81ad775e2ab94caef427ea09a612add9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186242 Malicious code in commitizen-playwright-selenium-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c754c3bfd1ff8786771ed58cb3d42e85de78b7b2210d6d9979d54019bdb9ae60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187957 Malicious code in mechatronics-arcturus-puppeteer-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e1eaa9f69cc53c02498bf1eed85f24aed05f14f42b3aebd1070fcefaea74066 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185484 Malicious code in antimatter-slidev-install-void (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f36ee67d3b0eff64d3bc613e4f77cf96c2ef826571257f8f7761c58e4faf537 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186691 Malicious code in elara-auth-enif-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f6a97085d0f95d38a45aa6b0ea2fad76374accd0dce2a52a48e7dc7b4bd9758 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186156 Malicious code in cladistics-markdown-pdf-helmet-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd738c7aa03702231879b831a4173493a9c29b30350ed0f630d5bbd30def03bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189300 Malicious code in runtime-void-resolve-assert-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bb443fcd51dd51af15baf36f2bd5ee8696d572a5a1b20707b057330e001a811 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185573 Malicious code in ashjustmeteai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09849e4d7bb47b00bc95d21ce1d37e4b0161620bb656822277846a8d2d761245 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185861 Malicious code in blueshift-canopus-leda-higgs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acab6813500f1c597e99e272e6a1c42d0a8644848cf3655935402a4123ebc4a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185601 Malicious code in astroinformatics-ethology-venus-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 226e9d3d2ba28c131f256e2a26ec85fb9afec9418f57e00d7ec0b300e0e98206 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188618 Malicious code in perseus-babel-spectron-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db366110319bf81bd38b78b1a2a132d41feaa685643562a2835f3887fdb2a96b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186102 Malicious code in chalk-resonance-triton-mineralogy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bf63178531eb1e18ec7be76ee8d7757e6690fecc2d546232fa954284ad7bee6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186231 Malicious code in command-dotenv-betelgeuse-neutronstar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03c0eda4bbcf824a758435c6c4648e1bacf43810c9b85cf1effc8e2dde9f47c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187593 Malicious code in java-simple-void-fork-sudo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a431fd38fe81d86e10d39de2b0de5f9e1d478535958d3b4f6dd4350bb47db014 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187939 Malicious code in markdownlint-subscription-changelog-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c56be628301573592cc719e5e4c23f4290e8e35e1e080e461e66a3ab71b489a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189838 Malicious code in technosignature-eslint-plugin-deimos-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59655cd4ef955dfbcaad401568c4eaa54de4cf841a6588794b7a680f8c055fc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189234 Malicious code in rho-water-load-info-mu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e14f7985d79c2471901d930216ad13686fed9538a20e6f305ed6922c2116b68a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...