MAL-2025-185958 Malicious code in byte-orchestrate-wind-water-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5065bd3afc319f23f585fde9a06d5b7b4182fd2cfbb0107f2ec1b61b89a82f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187148 Malicious code in genomics-paleoclimatology-aldebaran-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61d8b559320156005e619cb24f4a11bb7c6a51f20a8391b8536b8564c568899f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189320 Malicious code in sagitta-query-brane-parallax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78b2924afafc182dca7296eaa925db554a5fd90f33fc83a4d9277d5d005abdbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187128 Malicious code in geckodriver-nebula-spawn-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e0f439f3314d535195f43a58fea27de3a38211dbd7367c379d737eb31a99b2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189020 Malicious code in quark-hugo-geckodriver-ionosphere (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e05cc6dcf7a162f7144c009efcc0f8be0d5b8e0843a7849be001c03b0c02089 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187251 Malicious code in gulp-javascript-carpo-markdown-pdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83f3fb31d46de531e486584cf860923fbaef0e8a21f7f9233132af1ea5a5ebc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188226 Malicious code in neptune-redshift-semantic-release-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc439e829e757752b4ff8b2dbe8582cddd0435d867d34393544d740548b33caf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187899 Malicious code in magellan-bootes-resonance-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f8b4773259d5547357d870a866f9e7006b8eb86df99ec58fbc123d7da10ffd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186288 Malicious code in configstore-quark-sync-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30c3b67083ef101f23672989003756131308861e71de005811d2edde2b5f3f8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186929 Malicious code in express-standard-development-astrometry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b5bc04d8d15258188de8cce44569fa6199329f7f2dea755b111c3ea45a08172 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189988 Malicious code in transport-technocracy-geomorphology-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 061f2f2422688244ab4bd302d32df2e932b85bf69b5dd7bd0ed0e5fe08dd862f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188215 Malicious code in neptune-dactyl-pulsar-paleoanthropology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2123715c56eaedbeaa672d219a006c5fcd02737e10b7110ab4b05abb9c3f5e71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185840 Malicious code in biotechnology-halley-redgiant-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be587c196677b01b0966672ec9c47b63943494c056f4e7e118ca6ae67eeaa0b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186281 Malicious code in config-xml-sirius-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a58415b6cbe6528432cf6e1e8cd55074b566f71bef9a5cda12bcd5ebc971b522 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188108 Malicious code in mongodb-kastra-gridsome-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e827819cb34d09b58770afb4d907c8cfe540dad27e0303f9827fff00ee4bdb82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190145 Malicious code in version-sass-loader-webpack-quantum-computing (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 245ef4ee7065bdec8a11c9aee3fc8b289af5ac01fda869072a7d09d22217380b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187362 Malicious code in hologram-jekyll-radiometric-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34423c93c7a5b13e9f1e0d5bd862054c215574cb60b2d0c3c0fc097a038bc7d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187118 Malicious code in gatsby-apollo-sync-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee47692086d9bcafefec2a4f2f2b13221504e62731ca39a928a5cdf8089dd14a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187874 Malicious code in luminescence-colors-resonance-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b436ab9ff3e8151563e055e479bb058c0a0e3b067ceafea6f8f597b6542fdf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187443 Malicious code in impulse-eslint-config-zenobia-octans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deb5c240efb3880d55b5185feb76739b337d22f572cbf7af950b4f7b7680179e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...