MAL-2025-186219 Malicious code in comet-orbit-umbriel-thermochronology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44ebd8148bd5f35738b7a83182930c3eee2f0343389f023bb854c42d9ee86047 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188550 Malicious code in panspermia-winston-phoebe-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f7b7300da63723696da5bb34487f2b3691c2b412646c248b4e7c69a0645b7cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186109 Malicious code in changelog-graviton-hadron-panspermia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4654a7b3fbdc91ef9d6bb9b21a92ed4ef7c06883f0343185ff0493e3af578e1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188292 Malicious code in nightwatch-procyon-stream-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e497e4e46a9d7a57d90c0c65f94d4cbb5d2a38b38ddbc06eec016cc45c40b6e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185808 Malicious code in biogeochemistry-multiverse-xo-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8dc9b7f4c64531ed21eda56b6d6d2ca8e52be7d3f4f350c28f419073fa126f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188952 Malicious code in publish-nova-helios-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de8dd1b8b7d8d8cd82eb001ee8781283fc8c4cc24cd0e42f85a14b4f40911a47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187257 Malicious code in gulp-yildun-lacerta-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76a274bdb3d2616b5e76f058c31ebcdd115b7a1c639d4bd9c4736f68f31c0c47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188291 Malicious code in nightwatch-ophiuchus-request-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 894e22879845ad696f15e64f90cbac43dcd710f450574a8380386811c09f27d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190356 Malicious code in xanthus-fusion-oauth-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5fa144cbc93e4dd11b40e15d7092f90e2dda9887cd891d011546ced148d600e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187557 Malicious code in izar-ora-exec-genomics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53d17c4563e99682e42e4eae296514441c01b6f64a6c19ecde3adc967d542d2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187489 Malicious code in inquirer-quasar-polaris-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b2a0e0cba4ee0cc5cc0d94f2041860ea8aefd600a4acdbbd29641f201f2a0d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186285 Malicious code in configstore-jabbah-koa-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ecdc7bac31e1fd7c689cf131784e942a76c149bf2d2cbf7658f9a38538e2a29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188895 Malicious code in protoplanetarydisk-zenith-mysql-palynology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3a74138497749e5f498f269b5c421cfe84c7dbe035d4919018d99e7d062d9bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188223 Malicious code in neptune-middleware-mongoose-neptunology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d0a7212482567b4ff70ad523ee9502116475db634fa180bfd66e4025e91737e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187197 Malicious code in got-callisto-whitedwarf-gammarayburst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72a5d6a59b64129c9f1e662025a6ba97e7c31ec48341563d9d572d474073f3d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188191 Malicious code in nconf-markdownlint-archaeometry-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7418c7fdd6f5f9cba20dad9a16c7dead00aec76421e9064d3859578321532d3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188613 Malicious code in permission-index-zero-visualize-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef95024f895fbc9dd8bd4d4a7180084f57208d75170afa7adc3e52403b32a029 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188982 Malicious code in puppeteer-module-sails-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 258574792c4358cae9fb04cfb28fc03f4155696154704c103851e20e23a91bbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pyxis-enif-wasat-borealis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6360d976d2a538b3cac4e6a6de90d4745ca11d9890d84db004a268b40fd52e11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in remark-barnard-commitlint-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78fbc8f80c4eaa1b4e6c6d18faaabd90528b2cd1b8a5e7b7f6333164c23b83cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...