MAL-2025-188550 Malicious code in panspermia-winston-phoebe-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f7b7300da63723696da5bb34487f2b3691c2b412646c248b4e7c69a0645b7cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186552 Malicious code in deneb-terser-webpack-plugin-lightyear-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a910f12a93912cafcd341ae149ac82c7f49fcb236b79a4164a070f32aa8ef5df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185389 Malicious code in aether-dione-test-markdown-pdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb259ccaf3d1c636e4a75212af3fb8173b2ac77a1199ddb3181a1018bcf258ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185808 Malicious code in biogeochemistry-multiverse-xo-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8dc9b7f4c64531ed21eda56b6d6d2ca8e52be7d3f4f350c28f419073fa126f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187257 Malicious code in gulp-yildun-lacerta-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76a274bdb3d2616b5e76f058c31ebcdd115b7a1c639d4bd9c4736f68f31c0c47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185614 Malicious code in async-cressida-umbra-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d16d7f344a284484ee4c9862dd2dd6ac94ea09769be191bef503fb4a7288385f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190127 Malicious code in user-reject-good-code-sed (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2032c72f458597a497d1a878ab45c562a45d885ad37a471669b14d2c004b3d68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187541 Malicious code in iota-levels-foundation-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00c2b0af1eef0fba29bf292945385ea48af585baa02b34ea53e9ae76e24eca73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188333 Malicious code in nodemon-heka-wezen-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c295e465036b78eff0cd11ff9a8e7e1894c08d139ec57d8043ea93e45a02fdfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187135 Malicious code in gemini-dactyl-archaeogenetics-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 024021df6c02db9e21ee90ac2aa96821f37266ff503afc54cb6f404fd6724214 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190485 Malicious code in zooarchaeology-darkmatter-higgs-algol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e40bacfaf5995390d7123e836a60c8f771cd8c541530f8bac5be2044ff74b519 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185441 Malicious code in alphard-halley-ophiuchus-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f06c6744631b77adfa679368aa5b79b0679290514f0027616c347fd5f572ea5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187812 Malicious code in lint-staged-gemini-aquarius-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5fc40fa5df9bcceec113021575335b079fa5851a7bb404c582e9c8ace2a5b31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185850 Malicious code in blazar-quark-publish-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6051df5e76609f10fbecf1f58e20ad09d8098ec4fed4723d9a81bca13555b27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188292 Malicious code in nightwatch-procyon-stream-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e497e4e46a9d7a57d90c0c65f94d4cbb5d2a38b38ddbc06eec016cc45c40b6e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188952 Malicious code in publish-nova-helios-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de8dd1b8b7d8d8cd82eb001ee8781283fc8c4cc24cd0e42f85a14b4f40911a47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186303 Malicious code in cordelia-async-chariklo-farout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1082e6a74aee52ffd5a2da69b0c99b63e1819f99a35a627fdce7a4b7582a049d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190267 Malicious code in webdriver-manager-venus-coronalmassejection-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97a9f79b52091ebff932b871168c288a94bf9d5c3465addfc54adbcb69c3ca52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189977 Malicious code in transpile-bundle-upsilon-decrypt-secure (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43f3b2cc46e9852ad1e5d13517a2fc8779647fdf4b1bb64c894398cade68b86f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189428 Malicious code in selenium-avior-antimatter-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42db6c042c566e179df6a1d7dedd3a0cf140b367c1acfd4d03ed2f557fe89d41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...