MAL-2025-185543 Malicious code in arcturus-fornax-thuban-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7009c927b5e00df689b7d6fb41e960faddd6fa557d4deb76f787a5556c51e1d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186184 Malicious code in cluster-sanitize-resolve-omega-encrypt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcceef72f7076040ad3f53d861981ebd1e83dc7bf7e6c4bbd7c584c0c40e5a6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187795 Malicious code in link-sedna-paleomagnetism-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89f83ee1bfae66dc7210489390d14334111a3890b2209f274fdf0e50672ecaf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187585 Malicious code in janus-sedimentology-higgs-biohacking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d85c22284b92d13adc9467f232e0857fa609fb731d979a63d2b9deeb917c846c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189322 Malicious code in sagitta-shelljs-halley-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c27d14c78f0650cc9e36a6a09704b5376e65f49f575b3bcc650e67f28f0dbb37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187084 Malicious code in gacrux-magellan-cluster-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f8027ca7b26fabf039bb2e1967abc63917cc89e3b61e4199161637cf28297e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189882 Malicious code in test-fork-gravity-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2cd155e14b0f3d8707048a509a44689422afdacf2b452915a05a5894bcc2dbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185841 Malicious code in biotechnology-planckscale-nightwatch-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c7aa96051f851c7bfc81fa4bac9bafae95f5bb654923765e79f66ccfd820ea4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187791 Malicious code in link-emulate-double-table-book (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f82ea3cfbf4ead6d879ce2cf3a4148b644434223de5718844f6f514cef0a842 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186855 Malicious code in eta-psi-await-sun-upsilon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8e359baf44a269b2db394ed9a2256f320bf4de5b0af2165d64aca8bb9522f5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189818 Malicious code in tau-import-float-monitor-finally (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79602db3e66087d3167afedf11b524ceb75c27b2b884c56b824281cc7995847f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188123 Malicious code in moon-unix-meta-process-kernel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 432d18ccf99d5d85dffa21aae798b7ec0ce7b7df8d0070f8e8d4c477f92b2037 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190132 Malicious code in vega-eclipse-paleoclimatology-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e08a1aff2176c66f563e527058bb5b24409ae3fba13d78bb63d0c8d68d2a826f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186170 Malicious code in cli-webdriver-manager-lint-staged-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f52aee155dbc4a5e26a6be2c56104d10c6f19afe48943d15592317697736872 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190439 Malicious code in yonder-rollup-dynamo-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccb52551e42d4562dd9b19f350c065ba155117fe3d515aee67334e1a53d74ad2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189755 Malicious code in superflare-on-nestjs-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4bc374df6bcd185907d9484f3b7435d95ad6326a7b1eba24209d2443c9e3479 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186881 Malicious code in eventhoriz-native-planckscale-cosmochemistry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1da3fc7db81f4f6607a2fbdcf5a7717de5cc4c1f1f869bb3a677def9b158df3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189152 Malicious code in relay-dagda-sync-graviton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70e2fa9140c056d951512eeda4b917c4d77a95617f974d632aeae2f8e5465c86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187283 Malicious code in hash-socket-slow-debug-interpret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7eb938e088242a057f495dc0624b819b9294c2ad57b502008354dd8cad5c61db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186204 Malicious code in colors-gravity-cosmiconfig-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ad652910bd8340554c47a71c55c251dc830c3fa3917077d4c05d03874f5442e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...