MAL-2025-185395 Malicious code in aether-quantum-computing-koa-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84a4b8cd8cbf9f137039d3f9b8aca496bf6d4154493af8261c7c0610245ed308 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188295 Malicious code in nightwatch-server-pino-pretty-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77f606edcf51cd59fa77cab6f6134dde8ac83af12b0555d7ec2536fe43ec5b82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185668 Malicious code in auth0-stratigraphy-ursa-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11a88a92b26c3c4dc2b4c25959fb6dad8e7465407b50ab1c45e96b9a750a3f00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188495 Malicious code in package-uninstall-scorpius-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a74311a498dc54021eb8645f2068701b117d54e9b84519e6d9a51fc46143595 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187008 Malicious code in fomalhaut-venus-pavo-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 329c73a08e9f3032f6b513ae004fb488440b7b7fae9069985ce5d0cf7d9d76f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185588 Malicious code in astrobiology-andromeda-lightyear-astrometry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc736c55c72d0f9291044d176f8994899fcbe84570846333740ca27bca8d31bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189867 Malicious code in terser-rate-limiter-xanadu-palynology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a17a13c04a5971cb4246fee444cc08d23000846a1ac3b1116dcbfded9d002347 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187345 Malicious code in hermes-jekyll-io-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cebbffea7d927de23aca7aba4078e9cd9b853bf3771183fa290a72232a56eb7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185640 Malicious code in atlas-repository-nova-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84fc45a419be4c1ce2710de99244938901158da76b1ac1d2918bbfe8148ef905 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186697 Malicious code in elara-triton-quasar-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc2ebd6f38ab2bc5abd8dd2a5c620057c834fe86a99da5764849ed9c0b4d1e6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190037 Malicious code in umbra-farout-barnard-redshift (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3deb299289ab58a5d665be2d8f00891334e73390e4ea998ace64dc54f4c5613 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189595 Malicious code in spawn-exec-zenobia-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08d195fec77b588ee50726619249d1d77aacd06b4a03966370f3dee0c6edc02d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189764 Malicious code in supernova-equinox-singularity-robotics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67f56679cc22b11e8ed02364f4ec1180760f81d8fab695bc66756a0de7aee591 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189111 Malicious code in redis-parsec-fomalhaut-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f6b63091fe63c9c115a258761d34a460d26b24a7a9618ffb80e210f5fa78f46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188664 Malicious code in phi-shell-old-old-pi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddbf8b98f48373b31cbb5f1e89f4a12dbe3f2261af644871c9045b89528e7622 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185887 Malicious code in bootstrap-cluster-fornax-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f68c8b328a4fdb50634ae09eb0a5a69120d6aedc072cba9562ccade41a2e33e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185965 Malicious code in cache-meta-root-try-key (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0e240ecaa5180d2c3bb0773d383b7d3624ca22e35d3c052302961ef5c975b67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190348 Malicious code in xanadu-dotenv-safe-markdownlint-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3910fdac95250d53aecadede785513f9beceed180e4330b90a3808d260b82a43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188188 Malicious code in nconf-aurora-ionosphere-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90d618fe2bbc27849bdb3b7ab0735de3ede48bd7a4f02e7614ea1745ea65ea02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190207 Malicious code in vulcan-quasar-prettier-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9565ba49afcf1a59bba550526acc4bf8556d6fb903b6c4f4e3ee0b7f79d2944a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...