MAL-2025-190197 Malicious code in vuetify-firebase-darkmatter-mineralogy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72c7cb31503b963b956ff20f68210ddac6120ba9463afed7019619da8b0fdd14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186541 Malicious code in dendrochronology-pm2-chromedriver-orogeny (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87475fe3d358aa6c921d2001533db20b1270f65e34ccabe2e8b3f381d6cdbcc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186874 Malicious code in event-biogeochemistry-blitz-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c168aaa32c6134d19bcaacecc1914c528000c3a5742ed4bc55ec24aace833057 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187625 Malicious code in json-geochemistry-exec-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac7263cc49a2de8d29f135e5aec7b352a296376f9daa03d696c3de0a19caeee4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189663 Malicious code in static-transpile-sanitize-emulate-parse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24c91550d3bffecc316a3775d065e70b04e9da99f4f3aecc527ac3a8305f1d63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186043 Malicious code in celeste-pm2-xerxes-kuiperbelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d34b9a91ff88597bef75801c0d6dedc69a7142ed8501fa9bcb1cf6c7cb0ea821 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186082 Malicious code in chai-node-sass-biosignature-tardigrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57811ff3009936e39a8aa148ef288a54279dba83243c7e753f89627af5afdb3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189935 Malicious code in titan-bootstrap-lynx-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e6052c43f9808772f747f45034b0d8b51eecb153991ae94ad357a99ac6a1e7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188253 Malicious code in neutronstar-quark-dotenv-safe-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c51ac63c08154afa26f71278cae2c6f17bf39e6835d2f205cc35e304e1bf2f31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186194 Malicious code in code-interpret-finally-decode-cold (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bda77329400e2d6d937de5ec4642461363583de5cc3bc09ba36c5270ced52d51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187006 Malicious code in fomalhaut-ora-cybernetics-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9964b1a5f5727aa60a83b521fded36b2099112209577c7f81b7be40560c99fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188708 Malicious code in pino-pretty-radiant-less-loader-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56f26e9ea5896df0ce372833130544656e3589f313b17873c4069dfdc07eab2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190378 Malicious code in xenos-cladistics-dotenv-safe-joviology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae340cacc9fef88152d2d2f0ee248db87d240ed77d1746d6db2b10276738e0d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189482 Malicious code in short-public-permission-grid-throw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99cebd8516a3b996a17b13a2a6d99d754157b97ff1c4d86de13c01ebfafb4356 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188740 Malicious code in planetology-virgo-archaeometry-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a306eb5c4f40ca9eed5e5358af762509f337a8152ea0a8021b334ad4454ef58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187685 Malicious code in key-refactor-finally-optimize-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d884c51afdb274f51556f45b4b1a3cd67fc75bce3d5f03fea59a2f25352a3e11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188973 Malicious code in pulsar-orogeny-heliophysics-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 333e8662dad6f87568ddf49c98f9b0c3a7a9631721d35321a5287cb062713e76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185587 Malicious code in astro-photon-publish-blazar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfb6468812cdca3cbb6f3ebfbf8ac1b3a003fa7818d9ca76518f64c943efdf09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187538 Malicious code in iota-hugo-mongoose-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a38d5dd37b1d3a02248bee4b3d4f536393bee7b92c3c8e07a12e1e35b6cfdb14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188566 Malicious code in parse-rho-wind-compress-simple (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfc74d0b4f7851739d57d20a63fb3e706a3d684a0ac314906182c64d39b1dfc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...