MAL-2025-190249 Malicious code in wavefunction-parallax-jovian-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 938e05e40ad6861d8df01b57009bd79edb9c666be6fa41d3d26d00852d06cb71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187056 Malicious code in function-fast-error-private-orchestrate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c9981a842603cf507c7d999a60dadff6bc66540d629ab5b9de39196574c5d0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188470 Malicious code in orbit-zenith-magellan-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ea800d34eda6ec15db396e27410644077e675f01e4972c0dff9cda67740ff49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186119 Malicious code in char-alert-abstract-decrypt-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f751a85d1082b7e437e365b50d7e9f5a5e775d31cb2f009ac1857bedf81086b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187420 Malicious code in ichnology-eventhoriz-grus-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a51a1a006f545ebbe51221eda4a9f42a389b1bea53ee46c760fbcfd9929a62f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187397 Malicious code in hydra-duplex-npm-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24fed9db6f3a16972cd99dad61d1dcc7b283267059869c88c31951910c5dc518 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189664 Malicious code in static-view-warn-cluster-catch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8959878fc66db7bfa787bb8fb77224a14a0c6f77599a8ba842e95e295d4466b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189844 Malicious code in tectonic-pino-pretty-build-elara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c0bcd2058f31fec7229382d839c7ab77d7171eb0c186dc44476d099d33ed8b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187254 Malicious code in gulp-parcel-bioinformatics-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e954d5023f3652da9264a4ff04b69f8bb31573498561742734a9118e944fb11b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189004 Malicious code in quantum-norma-canopus-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89cc616e1c86db519ac69507809139300362341a112b7750cd00848d92ec1602 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189998 Malicious code in triton-nconf-sublimation-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12da63b4396d0564a570e2e7b9c0edef188cfe7ae6d0a8b17c3822aaae97b572 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189672 Malicious code in stop-cressida-prompts-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bb962d5b873cf65209cbbdd3c78b29f2fa140fe48dc0cefcdabd5d10426b5ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188611 Malicious code in permission-emulate-cloud-beta-stub (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae103f394e7fdbda527da60d6130a3740474fb86bb87ab9c2cc1321b78626994 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186758 Malicious code in entanglement-greatfilter-void-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5c938a40aa714464f758cf9b7ffb6b9ac75e1e0bfdfb7fa0e1b292f499d3135 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188548 Malicious code in panspermia-panspermia-polaris-charon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da4da720d53d91d807cfb302f7df64cc24a1fa42e45d91bdce582ec6c59bcdf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187757 Malicious code in less-loader-react-bootstrap-cosmicray-spectroscopy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34b22a3237ae7e67de2b1fded90e8aad83a6fa3a88ed44ce7d4329367a38aa5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186028 Malicious code in cat-big-code-star-encrypt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3f3f6f9d454212a45cd8e581e11bfd884a5fcbb6280ff321fad59393e2c987a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186575 Malicious code in development-dependencies-cybernetics-cryptography (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 394b529057f391623b292a4b60d7a51f780d22380dc2cdc5a4c2595970c8ba9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188598 Malicious code in pegasus-mui-dactyl-terser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a0679388624378e5407482bc78a5f6cf2643b9db492ccb69df51e7e6c4a27ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189782 Malicious code in supervisor-slides-orbit-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89f9dbd94f494a24ef57e9ec19ecdf8c357feea71319d53b704f455240c03183 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...