MAL-2025-187637 Malicious code in juno-pyxis-barnard-perturbation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03ba7667bb839b545547f830a7cd64064ebb2ed6a65582c2229a5f9a02be6dcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188169 Malicious code in nanotechnology-seismology-dotenv-parse-variables-darkenergy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7281d4ea4b4a674c44eb06ed7bbace36a580718444923d80db828d3aabbb64b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187036 Malicious code in fornax-postgres-phoenix-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5695ca34ea3d53ba924b7cf3957ca4a9b7c9f3c79a463ba9e5cf2c27dba36ca9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186134 Malicious code in chi-cron-sudo-finally-visualize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f262c0847ee6c703a9a8776e767b4e57c2edf2656b7acb15a3ac0585351622ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190281 Malicious code in webdriverio-npm-supervisor-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4759ce7fafd7b599f2d391dc859e66d40f9d758da169a2303128f81734a831f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187474 Malicious code in init-charon-terser-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3508eca342f082f4e63f5a94b88316894ac60ba0b8e0ac588455e64488807bcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188322 Malicious code in node-sass-nuxtjs-octans-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15489028a7c893c81b5652d7e2f95d596441e527e1ae371106f50eccccd6388e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188531 Malicious code in paleomagnetism-public-quito-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa0117eff0240cadd090b3d5d9d0e72ff394d66fc694fbac4b77dc2cdd423769 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189301 Malicious code in sadr-corvus-janus-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 068cd6224c2679afa1600ed26617858272747c6b62a13b0ecf5889b1339f36ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187555 Malicious code in isostasy-slides-augmentedreality-jabbah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5c520fdb6218dccc2dc1ade6fa90c7843862fb37f3d60582efabe4b3962017e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189185 Malicious code in report-water-view-cluster-socket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74d47942fe1d8723769bab30f3ba8f16a7ae89128a610ca5f2b3506215e6bdd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188170 Malicious code in nashira-betelgeuse-astrometry-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa2786725101eb80281d006fa25c4c0f3dbe25a6cc1a67c411ded90ab4425df5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189352 Malicious code in sass-loader-castor-prettier-stylelint-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36be8c6e53454c41e44313eec1651c6e1d576f1ea1012f52e9fa79e27af392d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187499 Malicious code in integer-kappa-sigma-double-view (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf5566ba2f350927d21b27f4360f63f302e2bc7d0db732981ccd4b04a114ae2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186017 Malicious code in cassini-terser-prettier-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 779039e84cc9cbb1b588093b4f8c5a64ee80242b35661cf80c54341e01822993 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186478 Malicious code in darkenergy-config-pulsar-development (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8854a12b87261a151a85d4e343a5d654007ddfc614096e8cc336e831d3deaa61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187337 Malicious code in hercules-local-ceres-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76d57167e63295d71eb4e13acdee38c498bd82d462e3e2fd11611b1559029127 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189958 Malicious code in tool-tailwindcss-cosmology-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 024cbd055f4aa386cbd24118ce725f651db3fc425f37acf6453c7e535d8d1d1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188539 Malicious code in paleontology-tailwindcss-tethys-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff9bf7ae090235d58ac50e3f500d0ffbb3709c476bee4ff023db6e4b7af13da0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189846 Malicious code in tectonophysics-farout-cordelia-darkenergy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bf5bcf2afab2b331136836c91d71ee1f886593553e406a307a1708222d4af10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...