MAL-2025-189232 Malicious code in rho-mu-catch-double-cloud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce2ad1e3def43f350a2696c66f918e07254dd687bc10518a3202abe7539570a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185717 Malicious code in babel-babel-config-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e59f0ddc5f47202e4b411392aa267a1343447c1668f653954d176f31867bc07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186958 Malicious code in fetch-charon-callisto-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62550fec98515505f3376660a176a2b13482b88711b0022c9925a9b825e4fb36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186546 Malicious code in deneb-iota-xenos-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5941dde5e83d9b49e44d62dcbb8338de71a05426727f9aa5813f9c325464ff78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188200 Malicious code in nebula-delphinus-planckscale-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41b5858e77cc2e90855108f123b97315d25fd03366fd3a2c7c3d5ae81ca595a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186164 Malicious code in cli-eris-cors-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e21ccc4b2c62bf4c996a5e3973550804784a618256801ff24d7af79770a5a6c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186222 Malicious code in comet-private-crust-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 725732624ff25cbca460975f0017c52a1def485c39e5583dd9ba8475f3f98fea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190161 Malicious code in virtualize-cache-cloud-cat-slow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f9eab5d5a3bb370cb101f7ee9bb7fc97ee9ff9c07c7e0182e1d89cb76688156 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187699 Malicious code in koa-eslint-plugin-corvus-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9921124b23b8c3333632e1a5ad8852823bbc42e2f37bc4ab4272265763d84cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189675 Malicious code in stratigraphy-castor-subduction-thermochronology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f95e074cf44d088a943a7366dcf7a4c1bcf3bd044d9b79a6733eab0a5ec6e5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185446 Malicious code in altair-async-jabbah-radioastronomy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 164dc0d18e8436c9b9b2d28e91de04e69468ba9603a30d5512837f595892c8d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189167 Malicious code in release-it-nova-orbit-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 860ab3495ac1d9fef2ffac460dccd2454e48b85c3df2a2fa18a230ee9b876907 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187730 Malicious code in leda-electron-builder-chromedriver-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c9799029874852e5e9eb516a15d919a84f36ac43653e1671cfaaa75560b7926 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187260 Malicious code in hadron-postgres-phylogenetics-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f7efecbc67236e9f7c84f6a8aae55425b28b28775927173eba1a0a284193afa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187421 Malicious code in ichnology-materialize-neptune-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8666f837f68fd0df77ff7324fe8ee2c1b1d69f60347a007db82e8cd960b88272 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190175 Malicious code in visualize-visualize-test-assert-monitor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df5ab78006cdd65094c4ee5d2bf6024ef771c9df5f97b6726c6840a65bb25c15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186212 Malicious code in comet-auth-html-webpack-plugin-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f5b037c3a10e0eb5d63054a411dd6a2daeb791121c669593b5602687a52454b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190104 Malicious code in ursa-comet-cosmogenic-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd11b0b7a1927f924e9836d71f861f050ea05f975ce2f6fb00a09cfe62d5135f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190487 Malicious code in zooarchaeology-install-aether-extremophile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49c22366e1d5300faf7e5c1fe07291be7060715baefed7aae9da5cc0a995bc55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187256 Malicious code in gulp-rollup-plugin-carina-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68bf9fcb09e12feb0d27fb4d36e938ec6bb40361ec9a2ab7c9eafbc28e56ebb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...