MAL-2025-189134 Malicious code in regulus-node-sass-hugo-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7720784fc00aa2f848cde571bf6f8b13377cb1eaefc406673aa08a433b686103 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187577 Malicious code in janus-petrology-sedimentology-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1954de2e091aabacbe5fefaabe6ea1065d082307bf2e67684ab0624e168e5726 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188968 Malicious code in pulsar-dotenv-safe-redis-fermiparadox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9c008e0e78c252ad80dc2cdf02ef146655bf01aa8cc20e278fc2892651e7ded This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189133 Malicious code in regulus-eridanus-meissa-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe9ebcfb13b4dae50d2ace3ef1ea735b3f71d9f8e886e7583a36ccfdac361cab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188026 Malicious code in meteor-jupiter-jupiter-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46c15bb4dde7cb205f506deb37c235142955b3906d8918fa352ab7add70e6e9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190343 Malicious code in wolf-baryon-pino-phenomic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c5c26b4bbddebc8e36586c62ff40c2aa982515ba61ec3a07619de7e7851a02d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187762 Malicious code in less-prettier-stylelint-warp-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 353b5557626f5f385582b78c5a5e30030a969e37e383a223ab0bc03cad20194b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186467 Malicious code in dagda-ablation-ganymede-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a403cd335f4f51180f5005355c2b51c318cce6d0910807f0b962298e25ee8ac4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186637 Malicious code in draco-convict-carina-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8ac39405d373fe12213e8d3838763c38a7674b0f4ecae50d5bc7ddfdd67f77e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185456 Malicious code in andromeda-impulse-quasarjet-elara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e410a4fcb58b2811102f923002858586bc7bc659b7f0faf932ba2c0a1456af4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187180 Malicious code in global-eridanus-yakutsk-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 049486c85c0e3eaa7064b02722bfb18e40ddc060886b0de61d8e5f4aaaa669f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190349 Malicious code in xanadu-ganymede-thuban-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee9f8b8c8bd97eb72abbfb618a0776afb1768b178f6a5f06ba703621965be9f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187603 Malicious code in jekyll-nightmare-juno-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 720b0955abd011ee1ffc556684896bfc2c599a4b61ff0568122dda4e4e07ee8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186796 Malicious code in equinox-eclipse-redis-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 737b52923e7c20691849abf236ed8ede5df6d7c8cd481e3c7e17dca303bc74dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186309 Malicious code in cordelia-websockets-yakutsk-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d647c58f0a661436c26cd8beb4a3828948c14da4a4c99f2bbe55d3e02b0c14e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187564 Malicious code in jabbah-umbriel-io-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7df36b162f8d91918755f7eaa032fc52d97c8082a66c80df6541a3af2667c629 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189978 Malicious code in transpile-double-grep-book-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 553a60f9123c033f645a983384952a5b14109e549654cec24cd58a48befacbc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186220 Malicious code in comet-perseus-andromeda-terraforming (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48aafdc9143f2f03e019398a2f17e8554586833012e56e2e3ea753d55afc6471 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185922 Malicious code in buffer-mocha-astrophysics-technosignature (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c19bdb6e5591367013f268343f1513dad33fc681f85b2aef30be47ec269cb5a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190074 Malicious code in update-barnard-rigel-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b80c2b2d41189c75ea3088452d80ac7c923a98a02010f14f29fc8329cd007b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...