MAL-2025-186666 Malicious code in earth-small-scale-simulate-static (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49fb4a6ae7bf4b0905de3d73d4d9b8c46faf60e8c2e993b8f02590be8e6893e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185418 Malicious code in aldebaran-phoebe-sagitta-brane (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbccf5241e22a7f267e4d1fbfd23724cc4e61b5fb81683a3f249f5614a147ddb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189966 Malicious code in transform-galaxy-writable-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38258b4baa1561b71fdae66ddb0bd2ac471ea1659801128433146ac90ecd09b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186741 Malicious code in encode-route-deserialize-eta-export (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4849f20d06c8c3eb71f943fcebe44c6e682e2c94299b7465ea7d58fde0889c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187404 Malicious code in hydra-regulus-wavefunction-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6a0feec94c7f2caf416d31bfddb17c067b095aa118051f9ba4b9b3b53c348af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190071 Malicious code in unuk-tethys-blueshift-cosmicsilence (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eec7fa46d7b2224b9299e4e99da6d3ebad7df53a8c9f8733f62c56af88f2db80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187245 Malicious code in grus-pipe-websockets-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e908ab5a9f1588062bc9ccd9e3447dc656308f6a5f76ad9232116d8165cebad8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186781 Malicious code in epigenetics-kinetic-prompts-taphonomy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c64afb51cb674d9db30da191e7520afbe5e2a9027ba0932f5a698f2fe7425425 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188966 Malicious code in pulsar-apollo-decoherence-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abf551a8a06ecd6a92721cdb0801dcf865ffc04b38a01e16d0c850dbdb17c9a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186887 Malicious code in exec-local-mongoose-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b872afd1ac291d4ad9a6557070b1a111c63c386c84d16d9637c174bb6e04f49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189292 Malicious code in run-script-sagitta-pulsar-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 301093ba1f19945b67f4a51c33b12c18edddc6ceb26f3c8bcb80daa80505b50e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185857 Malicious code in blitz-ganymede-aether-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b181543731aae6a400de37b08c10308d7f1e0194a3a51b57d03ae970a4c1feb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187240 Malicious code in grunt-ursa-cosmochemistry-xenobiology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58bccb17c4b674e6159db53f27bc72f3b0aa547f2c6e40f0e3c61ee22969090b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189241 Malicious code in rimraf-betelgeuse-baryon-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3aec160d4f2115fef5d041bbd82fe690b367aa8d2bae4e68d3c473c1e8d806a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188531 Malicious code in paleomagnetism-public-quito-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa0117eff0240cadd090b3d5d9d0e72ff394d66fc694fbac4b77dc2cdd423769 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187023 Malicious code in fork-secure-code-daemon-abstract (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e52335d0c8c5a3592945cad720a46a4342b5890c4c9313c65cb63fe16831215 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190481 Malicious code in zeta-permission-beta-short-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 150e97326cd1d07028267b635aa4429aa6fd26cd6649457e7a1bcf41e904538c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190204 Malicious code in vulcan-astrobiology-wavefunction-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f48cd42be9a2a6be3b8e905ae225912535c292dc4b693ff78a5278eacad6bb8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186555 Malicious code in dependencies-galaxy-install-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5276469197c6221f8948ff69ebe656dae79f34980fb1e4e95a39c2df8634cb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189284 Malicious code in route-await-root-monitor-nu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29fb642731ee8fc87309e75918ade51ddd54aab1fb69f028bd0f8a5656b0cf53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...