MAL-2025-185734 Malicious code in bad-info-encrypt-boolean-simple (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30d7b093a3c4eac924dc700eb11d1fa0c68214e3d89a9a8ef9929438ab50d583 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cosmos-centaurus-charon-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2321296a3df70cdf5478b1ec5b12dafad4ea5aceaf7cf64ae37ae46f0cb04c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190333 Malicious code in winston-jwt-vuepress-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e66da85f83a6c52707fb31a1471422b7c312dfaaa2f7333a8af1e1fdcad5471 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189826 Malicious code in taurus-deimos-package-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fdb160245be134cc43b3db4192ef85905aace2254ef9e168298ee0cabe4239f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185744 Malicious code in balance-dog-throw-balance-daemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8e2cf175dfcb256e4e04e8d82f344e971002226d736740c3e3050cf4aef44a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190463 Malicious code in zephyr-ganymede-fomalhaut-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 400d2c278a0302d618f65ae002e9c82387d30f08742bf4fd5af0b01c9082a40f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190007 Malicious code in try-alert-hash-catch-index (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e85fc5860c00474af9c73797df5baec4c6920cae1896fe84f084c86f57a23547 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187166 Malicious code in geodynamo-ursa-coronalmassejection-elara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8f67be9f3617c167c0f4dea03f61b4726cc7c8239375a37bf6a104dd60d95e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186931 Malicious code in express-terraforming-nucleosynthesis-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d58c13e8ab6630647d9a08c3b65040effac140f3a388762a6acd5eee532a1a66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190231 Malicious code in wasat-cosmochemistry-nucleosynthesis-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ebfd3a537468dba057e040fe1e211e8bf0580033d12436164ebfafd5c30b736 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188803 Malicious code in prettier-plugin-markdown-joviology-style-loader-zooarchaeology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 233ad9fd46dd0a7e882c1bfcb9e7285a3b2061a17d83c3b4f4741b2d6cb699bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185783 Malicious code in beta-moon-fast-authorize-deploy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04718f9575365342a95b182394e3faf16985b0f54304fe8408cb783b9ba9d07e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188367 Malicious code in nucleosynthesis-backend-local-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12f0e575dd8081f33d306cedbbefbb2c089c82765433643badb89e418944ac93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190443 Malicious code in yonder-xerxes-xanthus-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccc40dbe9bcc12d0ac9abb79a3fb1a96f75e26103edb32a6aaaee1c4f3592572 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190320 Malicious code in whitedwarf-selenology-jsonp-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b83a2580056cf6aa51868e0aaae0415ef996d229c5d8b9ab779a3fefa1ebfc67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190130 Malicious code in vega-commitlint-prosthetics-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dd5c39fe3aa4ba188aca38f7019952a1e2654a7b513aa87f542447a21b0cd72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187280 Malicious code in hapi-zenobia-superagent-geodynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13954284061f6dff2946a7a8ea7e292f2e0a5c843b31c80ea8709b8cb7d11028 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189239 Malicious code in rigel-photon-interferometry-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80fdd06f2759d7a5c81facbdff2a653399e9620cc9ef3b395398eac4ca83714f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189817 Malicious code in tau-import-file-bad-byte (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4109c4388178c46ba55b1c77f6875170c704f0586b730e075dec134b695d713d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187293 Malicious code in hawkingradiation-jupiter-morgan-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bec805e2509a0ad2d0b56982f75be5e9577f71ed213846605475b8cfc1064bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...