MAL-2025-186163 Malicious code in cli-cordelia-chalk-redgiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a90893c3d7e4d4fa1c3626b55b27eb9e39f5ec83bb10dea8c99465c4493b68b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186767 Malicious code in enum-parse-protected-kernel-refactor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0dbeea8703cb39fdaebdb0eae171d5530df87e6fb81440888d36ce34490e657 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189062 Malicious code in radioastronomy-eslint-plugin-procyon-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7851458d77832ce28ecea0ea88d69a17a9a9bfc63e57ceeb1626557f598993f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189752 Malicious code in supercluster-vortex-blackhole-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a840cb750914a2d75e4627c09a5d65fdf3f78ccd08344dfc9f366053fad4d11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187617 Malicious code in joviology-heka-accretion-speleology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34868ad6595b1c27b524670f052cedc5a99dc4e9e5a53ced93b53a466b35dbff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189445 Malicious code in sequelize-ophiuchus-parcel-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f3fa16271461dc63fcaae96ca9ec7cfde5867ab6ac8758b77839076758c41ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188738 Malicious code in planetology-sociobiology-spawn-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e157db7c0e004f3948a95876c03456347236d1cffacb7a03e4f712011774422 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189667 Malicious code in steganography-yaml-quark-geochronology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dbc57cb69903aaa2db9f1b9e287c532e67cb38af8417ad3e70686986e074406 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185641 Malicious code in atlas-standard-ursa-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1c6f3fc3edf4f35bc1bbdcbf1b42b067954257dafb13d5506a7dc70a03f6785 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189406 Malicious code in sed-sigma-encrypt-catch-warn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a860b00b4fea2a38153d850c754e694e0ac14cc6a8bac156ef5bef91fa4290f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phylogenetics-fork-tectonic-cosmology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20cd04db7ff79d34415c4910ccf5f498e218ce9c415f6d4a1e893027ad764142 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186237 Malicious code in command-xo-module-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fd904aec9c3a6c08fbd9825ef68e0a13af99f7a6873004f2183b1f88c4f22d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electron-builder-csv-npm-asteroid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf1c41f7b478def4f98d67c744bd71324c06f401c2371977bcbd2022b1877a53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187638 Malicious code in juno-saturnology-sass-loader-joviology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector beb54e9749d9d21998cf67910838ec70d40b9d045cee981abefd69fed26a290d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186939 Malicious code in farout-gatsby-install-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a7f6433fbaa7d30fc2b59bb25148d19c4d0981e34ff8d8b492a4e527fdd6147 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188107 Malicious code in mongodb-cz-conventional-changelog-rollup-plugin-biosignature (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b32ece2ef7ce06b92f4ca3800ffeba375ee8a9902c3e47cb0f2dbb8ad0cc57d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190312 Malicious code in wezen-hexo-update-lithosphere (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29b835942f6a8543c810550c04c687136135ae9e3c47b61eb95bd234b7c13caa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190069 Malicious code in unuk-mui-antares-neuromorphic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f1ec361b50b97c7e7b7ab5f49059900ab7878e6ffac9899246ded9fccc19d11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188710 Malicious code in pino-pretty-yildun-express-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 269ed87702f42dc45182c4c396bd4001c18e108c66d5f61fd4f3ac96adeee437 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186650 Malicious code in duplex-tailwindcss-nestjs-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cb446b2c191323971e7ba7bde19ddb20f59f29b7a2b7e053f8d6473d29796b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...