MAL-2025-187315 Malicious code in helios-cressida-biogeochemistry-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0768619dd13d60c867707b16965714e491fc15a027c1e3dec26fee22674eabd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186694 Malicious code in elara-hexo-postgres-astrochemistry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4068ecfde3f050b2eb3b2da7f67d43a1e892a4a4b0f4124c4635ec96c99f44ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188698 Malicious code in pi-validate-water-test-tau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ecddad273b22a7a6a747b0fe0d76b37f55ab197c1c73ad7f8f48726d7bb7c1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188919 Malicious code in proxima-shelljs-spinner-brane (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f7bd32ce89463fc87f2bf996cd96de28e6fa265c87a586e1414a63e912a88fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189944 Malicious code in toml-apollo-materialize-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e9f49e2bebc95df8cd832e85e4c59762a5d447566c87737a0b06568fcf2cbd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188079 Malicious code in miranda-native-alphard-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d87962789ed9ae812165f1253ddd66dfc007bb8159135fc21ee856412172029f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187518 Malicious code in interstellarmedium-remark-procyon-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b67edcb7e03c7978ec0ee60312c057ae5dc8fdfc867993b5b2d333ba060e48e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186503 Malicious code in decoherence-neptune-saturnology-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b550a9f0da242bfe9f0ba64dec95e44265c55f7236a1934c5bc5b965ee23c4c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187728 Malicious code in leda-cassini-dactyl-mongodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2202684f09a6fade6cdc2675dfccee158706ef464f4837c0be92ef6e5793e07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188143 Malicious code in mui-reveal-md-registry-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76ad89d8331122a15bc7cf5f8f5bff6b20a31ed3a2ccc02e5573a1f7b14248ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lacerta-betelgeuse-xanthus-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3c6304ec6e85d47dbc95675de68746430ade85ec9fbecf5cad5c5ec8a058683 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eventhoriz-perseus-semantic-ui-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36c8dfc94f09b2035ce23b897ae3ff76adb7eb115168d013c0bbd9b08398fa8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auth0-andromeda-heka-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68c39f6cf6525f4014662ebdc8b1f003fa6c12eb9f5603ce6f8bb3d80ff05d4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mu-dog-proxy-decode-unix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88cdfbf38d06291aae96e832f05b29f00cfd35589943f585837dc348ec6b1fce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in simple-file-omicron-function-decrypt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector feb5c96a65a517e0dc96e8ee4b0b528e0c94124066624e5e18e962dd0d9da712 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in csrf-mutation-oauth-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b3d31dcca040505ffbe98cbfdc62ec4c56c09a19695b316b97d62cbc7f6254a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sandbox-long-compress-book-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ee676fdf4a328f91380e094f39eeda1184a866c32f09c81103c42cf748fb558 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loop-cosmos-perturbation-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f9531a3858a703e8badb0753f120e1b0371cacf46b3ab74d2fcef9143c861a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-config-geckodriver-algol-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb91f3db2f6f339619f29bd1ad8766449fbb43717aef0c7e9130729b1287949a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in html-webpack-plugin-zenobia-nebula-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bda7c207337434698205e1a554e373872174bfe0253efa98b12e47eb140c345e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...