MAL-2025-186460 Malicious code in dactyl-loopback-axios-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94ef9b4077e3c6ce19e631255d57d1edaaaa35e2479ccaad486e1d3e0d6f9a3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190231 Malicious code in wasat-cosmochemistry-nucleosynthesis-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ebfd3a537468dba057e040fe1e211e8bf0580033d12436164ebfafd5c30b736 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186316 Malicious code in cors-centaurus-electron-builder-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector feeccfb1d261c6ca7989d2be6cee1c0b020d5eaa19f8a9d0e008e8d47573304c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185608 Malicious code in astrophysics-mesosphere-neptunology-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 684bd004536091223ef4c99151f120e9e68cf9d9e4b2583634be658dd965d50d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189982 Malicious code in transport-babel-dagda-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76e1c06bb58ec7b568f529051bd863c23ffa6e9ca7544112284c9f889effd370 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188438 Malicious code in ophiuchus-corvus-stream-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16eb5f6ea3c98ed2113faa6d618db3d3201573c3bae9a0c14b1e25dda0cdc95e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189928 Malicious code in throw-omega-catch-hot-sanitize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5660c7de16bc52821723bdfd1087c32d214e18bd66d23f006a40f55180fedacd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188542 Malicious code in palynology-semantic-release-pulsar-wormhole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34206c99211389792c4d934032f76e4292094dac40215fc8bc1353575dcefef7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189699 Malicious code in string-optimize-class-link-authorize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4842e2140b6bf57da907bbad5a736fa6486b1a8d4f05cb635d68414d5295b204 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187472 Malicious code in ini-mongodb-got-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 038ac6a29d5943f57bfec8a485c48e4adc402bddaa61931f49f1e469f7ef312c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190031 Malicious code in ultra-karma-nuxtjs-nanotechnology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9986c3e4f9445f6550a96d97a386afd87a83daa5b777169bad5204750216e68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189746 Malicious code in supercluster-command-betelgeuse-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75c4312f9a8f4944f7302c2d84d8f462d661b5c52a2451094345926045d0e847 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188240 Malicious code in nestjs-luna-meteor-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dc02951e53ebfa9301168eba0b7c56d46b25e61f53253199174afa594b15df8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185734 Malicious code in bad-info-encrypt-boolean-simple (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30d7b093a3c4eac924dc700eb11d1fa0c68214e3d89a9a8ef9929438ab50d583 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187373 Malicious code in html-webpack-plugin-deimos-toml-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bb045f13fdeba200e83090bae2409a07346335c9f563b24f275cd3404d87132 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189994 Malicious code in tree-notify-report-decrypt-scale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0ef817bc7ba20de74ad100abd2f3c54d81b1f19ad4c85cbcd2f81b282282fdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blitz-ganymede-aether-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b181543731aae6a400de37b08c10308d7f1e0194a3a51b57d03ae970a4c1feb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186155 Malicious code in cladistics-geochemistry-vortex-panspermia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 654f488b9a4c4d95d757783d5812652e68474653dd0247b093552f6bf7e660e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185499 Malicious code in apollo-development-cressida-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c296836ef6103cc0343dcaf31d3800f97ced245deffdcac4a8d01c097a4926d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188433 Malicious code in oortcloud-zephyr-kinetic-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51b32d3835116fa51b0ca9e1a21f2e8ae7dbce3dd0ea885e925e6b8237c337bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...