MAL-2025-189856 Malicious code in telesto-publish-oberon-charon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de6837a499af3bd764db78016d59ed3b3b1fe3f57a03f81847910a466b622002 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185755 Malicious code in baryon-perturbation-javascript-pyxis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82e3b91264dd6978584ccce3d20c13f45009b8478f3c69fb0ec077a6d48a37fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189244 Malicious code in rimraf-jupiter-carpo-phylogenetics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52050453f7f9de40e6c1a5726233c5291dc493693fe69bbf213323ee6f4e3e55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188792 Malicious code in postgres-proteomics-markdown-abiogenesis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6860516dce9a9d7e0ede3eb6cdc0557443c2c6fd995d1d86b1226558ffedea50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188183 Malicious code in native-quasar-middleware-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4925360eb023738a4b9a50e62ee394450cdd5775f18795b8fe6531ab3371729b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187850 Malicious code in loglevel-hyperion-bootstrap-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3637624f4dc1c51c25b26e76227b5d808fd156ab28fec3f880fab3b549f18a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mesosphere-nanotechnology-got-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c51ddaebeed905bd3e4d2efb4932a9094e6dada95ad1d5541fb3cc456209d2d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inflation-apollo-rocket-higgs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 395b1247c5e72e553ae03620ece5fc27af309bb24287205d0b5f511c0c7a50f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187817 Malicious code in lint-staged-superagent-eridanus-bionics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 066dc6b85c08093514728ad74577e54a20edffbcf7d838638c2e8ccbdc1dfd28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188448 Malicious code in optimize-cache-static-orchestrate-import (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa661ea8fe97761367e0b2fb10ac18b163380643bf7efa070ae42b2ab09d95a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186407 Malicious code in csrf-callisto-hapi-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3353f2b88309fec3f0a2db16bc2c7dacbf46763f6ef7ba45dc6a3742e6ec2f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185502 Malicious code in apollo-ganymede-algol-impulse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6884123d01cc47416990accc41d7ee9a8c0181cfe461bf7c83149d09d680ff4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186969 Malicious code in figures-miranda-helmet-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53def4b573229bf498847e43f7136c42519ccd7b938ca0c0ee2266bca66c1fa0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188957 Malicious code in publish-sadr-event-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 978e41ca2421c245f688460c9427d78104c89c3f1cb3c995b6129df54b03fe19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185365 Malicious code in abstract-decrypt-async-public-phi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51b85be1c1821e69911d086ceb1086440095d3c75414a4be0d017c6474f0df12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189896 Malicious code in testcafe-jsonp-lyra-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 304cb8c0a4bc6028d7409abd3438dd2e2e32758c808c2e52ddc9c45829b586ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190463 Malicious code in zephyr-ganymede-fomalhaut-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 400d2c278a0302d618f65ae002e9c82387d30f08742bf4fd5af0b01c9082a40f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webpack-xenon-relay-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41180387bc28be755e6160e34bcf082bef42299a422d7d567cf3db2bca891872 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189589 Malicious code in solis-perseus-bootstrap-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66b8d59746c8916f2d0e0aa816776331f332804015a10f708950338801106be5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190171 Malicious code in visualize-decompress-finally-abstract-final (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f96eaec8af9fa8b01c9bdf1bd478313f22e297e828753a7e086ece4042c294b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...