MAL-2025-190049 Malicious code in umbriel-singularity-auth0-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2f69ccbe8e6a8eb8138332cc56108dc45adfafb0b70e0e8c985263b01df82b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189891 Malicious code in test-theta-old-yaml-eta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3105bd46bc3bf37e1426594d233e6aaccf8654317b65946cf727eac0782e7db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186804 Malicious code in eridanus-buffer-colors-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ad0a6bb846c89ee43a940cc41820b10715f3ed75eab1b0d1947860b70767ccd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189648 Malicious code in standard-kuiperbelt-neuromorphic-sedimentology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6813ba4210065b547d71da8618762bbab598598fae2265b0e054e998d3bb2d00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188957 Malicious code in publish-sadr-event-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 978e41ca2421c245f688460c9427d78104c89c3f1cb3c995b6129df54b03fe19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189255 Malicious code in robotics-proxima-thuban-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c49c583566ab4a988020e91856a8424efde07c79821afab4121ca10ecb8ed77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189816 Malicious code in tau-fork-hot-web-big (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b1535674fe21c755cbdb872d3615e3794dce7ac1ab4df9d0b4982a0903171a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186961 Malicious code in figures-archaeoastronomy-hadron-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63ae70a518089c6ceb6593edb3b798ea5e1e93fc9ede587652dd6e24c212556c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187902 Malicious code in magellan-gammarayburst-passport-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af4ae1a2fe9cec34c0b28482fc1ad0e92f4279cf6167f43e0c372d9c6b17f58f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189715 Malicious code in sublimation-archaeoastronomy-browserify-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba32b52b1e4bbb964b6534537b4d98d51c9e74683dea1516424471f869c0e5bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187972 Malicious code in meissa-optimize-css-assets-webpack-plugin-express-lint-staged (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3eedff5af78c38d953cd8a24a97713690a208d01ffa5df7018314e5f3ba5667 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189541 Malicious code in slidev-supernova-pavo-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28197b94becba6d67bbba6f13af761bbe19a54a265b22921e9d85b9b97d1aa89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187760 Malicious code in less-mineralogy-airbnb-tardigrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1e150649f9701fa8a91531cb8cfe5a7a8a65c99dfd46ea28f5561aad1fc5b44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188931 Malicious code in psi-sudo-key-simulate-double (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9ee62d1636d2e3ede1d70eea831e93d894b9e64f3fdca81500b89f12f6071f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189067 Malicious code in radioastronomy-readable-proxima-sadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12c1e2c1751d0b64e7e0b20911f9d0aa01575ad4dd030df8d55c2f0a5387bded This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187787 Malicious code in link-astrometry-gulp-transhumanism (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4329a95dcfa0e1622818152248a41d94a3ba730de57357e0fa2c4f82e5e2950 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186043 Malicious code in celeste-pm2-xerxes-kuiperbelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d34b9a91ff88597bef75801c0d6dedc69a7142ed8501fa9bcb1cf6c7cb0ea821 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186225 Malicious code in comet-rehype-transport-entanglement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55f76cda7e3ed87a43e6e01759a8df12b7cdc8c0be725210b3f7a49e834137a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186897 Malicious code in execute-long-pipe-file-encode (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5dfe837fd34a8b4469ab59da1615cecd539ec907a7092c2d0566fadd5cef083 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186744 Malicious code in encrypt-link-alert-grep-moon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e237a747a38d097627400db5dc22011d345ce71138e2e54d60ee04ba6a1a43d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...