MAL-2025-188988 Malicious code in pyxis-blueshift-metalsmith-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d35b14481cf4830287c5d9e4d6a2a178a989b10fec0b5b95a622eecbe4ed1820 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188632 Malicious code in perseus-selenium-lepton-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9bfc1cfbb199ea1ca3bb90c697618a7d74ab51f4a88a59c1319771b74755a06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190151 Malicious code in view-visualize-nu-shell-small (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e87b26929fbb1f75d8efa9ab61151f6081a056a832e1c145064abd8cb24e66e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188366 Malicious code in nu-interpret-container-grep-bad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09fcf0f0b56c9bcce303f3f0b00cd434d5f276b06967ac7541976361325bfcd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188263 Malicious code in nextjs-google-transport-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c44eb151cbcb09b201958c6f74871e720931d3f659375891dfd01e8250ce544 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186294 Malicious code in container-void-virtualize-transpile-try (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a878e00673222cc404285759beaf06913e6a3ce1eae06386bb4225210e21bf4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186732 Malicious code in enceladus-got-ultra-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32239f7dbc5399708cd1356919a8314d11782fff280d08afb68b2a936bd12671 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189691 Malicious code in string-beta-benchmark-scale-file (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3882c058c785bd049ed13423d9d06d22f92666c8d8425b6b99e0150daa0b099f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189992 Malicious code in tree-function-kappa-decrypt-assert (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cacb380e1ce93ad7d45f252a5f9858b2a29a47775e53ec4c03d4779cadce49d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astroinformatics-accretion-dysonswarm-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebf69323bf479cc5874cafcc0077c2229dd31319e197f5222ed445892ce4d910 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in virgo-framework-dependencies-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0409c65db6f8bd311bf6cb439379b2c52dc1f8fc0a7ab975a69106943fe4e47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deserialize-book-cloud-awk-finally (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13e29d51b7d8b9cd4caffa0769c0027c85af91ff8a9b069bbc6d9e639050ef36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186919 Malicious code in exosphere-troposphere-grus-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a938b8d5f2c06771aa4f407892665e96dfd1f65f2a61835af1bc190e090aac6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186590 Malicious code in docusaurus-bellatrix-xanthus-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9143eb20392a0d27e57a0b63580b6e7156c67a61046a2b92d7058da8fbc82db7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187971 Malicious code in meissa-markdown-iota-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbfac5256294b4858c1b93f7aa1f371d7a3507cae5cee54e35fa90d09c910e7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189921 Malicious code in thread-monitor-async-omicron-optimize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 061a9053ababe92204caba04969dab4473e5750eb9caadfb4089a4ccc4449c5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189120 Malicious code in refactor-private-table-finally-water (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e7fe350226f8e4b7671ddae6faacdaa25fcb6d3a536a3576ea5fb7a4c42e214 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189527 Malicious code in slides-callisto-algol-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67b3bfe695362ca840a8b1d470ae420b7edfcf507830c21db35bdac8e60ba2f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188471 Malicious code in orchestrate-awk-encrypt-moon-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c37f89d8c089dcfad0ba9ccd12ae226e2a797b3337fad8b5f9809995d826d545 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188533 Malicious code in paleontology-luminescence-less-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e35af19331d041979605aa5f1ebb2526dca47615c002ab578283d3243b83057b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...