MAL-2025-187415 Malicious code in hyperion-postgres-eslint-config-warp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b260dcd289e1588d69c2094c68adf2469a9d1213fccfe6612787d31af1167bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187364 Malicious code in holography-antares-enif-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc8649af4f582c4122138a6cc2191c5208ae130c40e0a81317dfb3433f22d4eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186339 Malicious code in cosmicsilence-quasar-vulcan-gammarayburst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 866755da032f89e835ad4dcc205c1bb514c50448977117637cdb00b19af44d3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189240 Malicious code in rigel-toml-meteor-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb277329d6ab2c16e35a5db9786b3b32d0cc5ff257df12232dd1afb5ee4bb67f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187670 Malicious code in karma-update-slidev-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f438df7e0802c318d23f75444f90cde1a604206a0ae49a7dcd2e295be9f2e70c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188347 Malicious code in notify-omega-process-kernel-protected (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 227e8588cf0cf575c422c862ccc3a11b88efabe78157d3b60216f9835b90158c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188160 Malicious code in mysql-fork-pavo-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 238d311463f574170c5184cf88b55be3f9775159d52d35ba3b1353ef03901c60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187989 Malicious code in mesosphere-innercore-transport-proteomics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80bb5102ce8c8e9dda9b0ada71dbcfecfeda472735d4acc10e395b1193b6af4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187491 Malicious code in inquirer-stream-metabolomics-uninstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c23a7e6ffd07c74d3af2b189dddfe6e2c933e7ad9a7701fe3da4173ab05cc470 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188506 Malicious code in paleoclimatology-cosmogenic-crust-kardashevscale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00e15ddb8489db7af6fbf7562f37b8fc6a58192ece39405003e76501af3efbeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186832 Malicious code in eslint-config-antares-deneb-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00eb647f01cde44b919b7bae8593ca4cfa9bd03da63424fbcc6662f5c874e127 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188452 Malicious code in optimize-css-assets-webpack-plugin-terser-rollup-plugin-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9abf544e29423b7c4a79b3a0794c0292360330e730a5ed59e506c1cfdb40799 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189431 Malicious code in selenium-halley-algol-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02ed0d72aa17ef547016ffb572562b5c34e11e0379d30a6ddc9cdd64cc716793 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188231 Malicious code in neptune-terraforming-commitizen-phenomic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffd15125e8c1240c99c49d55043b1c295bb37c7620ec8c2e54627a6d174b5d6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188729 Malicious code in planckscale-augmentedreality-relay-planckscale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5f998a78e0845bead33d6caedda7cd51aea9b95c228d8eccca9940a5fbfef87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186217 Malicious code in comet-norma-semantic-release-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32d7b6f4630255380dcea5a3bf2611344de910b5a96a201e142940f865f9cc09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187517 Malicious code in interstellarmedium-pino-bulma-darkenergy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab392f921f051d5be29925ee8bffff06c637f5fadef8a9ab6399776bf67709ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186828 Malicious code in error-signal-minify-zero-index (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9de97ad293aa756831d0293ba26e692cc4a59e7f7ba970803c8b51ec783cb420 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188743 Malicious code in playwright-phylogenetics-eigenstate-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db3bf26277341d32e3cdb3cb5659362eb7f870ebb3362011004250ff5a37b638 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189072 Malicious code in radiometric-proxima-ophiuchus-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42e4cebbe5b73c636c28c777ed6499e4fb906fcc3ffa5a700a0f16cd85821770 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...