MAL-2025-190146 Malicious code in version-virtualreality-scorpius-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2474968d15e1ae15d7fe3d765d5e06ca8d713e82add09b6ddc4d7083cda699b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188749 Malicious code in plutology-ariel-subscription-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7586875995a9248c1bb0d69061389e43a86bfb28b5f8a11e6aef21281d3ed47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189907 Malicious code in tethys-schema-proteomics-nuxtjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc52405d182abcbe70ebca1e32782e8c4b840ff6509fd47793c70c9d97a8b05d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187607 Malicious code in jest-astro-despina-aurora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 569fa8ef9fdbddd1906550949c47b3b5176f9b5c58439068442b4ef54ed34221 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186403 Malicious code in cryptography-cross-env-google-yildun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 919e037d7178bbdc5cbd024f17c6cf5bb23091ba301945f2431560076af9bd8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185512 Malicious code in aquarius-babel-nconf-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 367d06fdbae8de2b7d6bcc68f6b13999fc7160d92484baa01898cb3fd84acfab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187641 Malicious code in jupiter-fork-axios-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d618233585daa02221533466a8b12423cd094f4adae74b7a5095bb9e211871f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187286 Malicious code in hash-uglify-cluster-info-orchestrate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58a3a53ec24253c6ab5d1ed24fd3cb74c1c53f7311dc887ff7434622f50ad233 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189143 Malicious code in rehype-janus-nebula-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b030dfe78269f05856c1d36dcfb4812704739de10c5ef8312af45bf99110f18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187945 Malicious code in materialize-pegasus-typeorm-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4649dbfdc9a442b1e02107e4830d914cd52129b12965f257c943f89497050c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185885 Malicious code in bootes-terser-local-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24f9962ed8b60b0020ab4fb27265ea77fbee4bb93d02926c16251a8bd5c9c41c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186142 Malicious code in child-process-charon-mui-on (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee5e948049c8cfee3a492e90195667a71b6c916914451d1fdfaa8ec56a48d7c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187550 Malicious code in isostasy-ganymede-archaeogenetics-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e72a040292a691c04c12c28505f0378f69205785bee641e65a94f8f7df242d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188954 Malicious code in publish-postcss-loader-achernar-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7167bde1de257f069e942b993e91cae612193ea9171edcb8a7f3df6aa4653c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189723 Malicious code in subscription-jsonp-metabolomics-hawkingradiation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73b99ac4b6d1f2920c9cfeb64b32caaef526384c1277eb268f9495396666671b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189022 Malicious code in quark-loopback-palynology-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d40ef0f2be07d54e6e36d6b88eb13d24800f9598149a61a58a5a23014e5074d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186795 Malicious code in equinox-cosmicsilence-subscription-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1180d2ea46bce39936c28746c89d5b9410b1883fe47f962ceba2fd73e2b49f86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190445 Malicious code in zenith-cladistics-plutology-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05e4a78984349e9b233c2b9c6774a1bdaf97c0dab19c4ef6f0adec068f2c6150 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187910 Malicious code in magnetar-paleoecology-tectonic-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd63a02ebd57584debf7685bc69f9275d88b6ca02b76d34b92344e2be6c0947a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189397 Malicious code in secure-old-deploy-resolve-encode (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edd40e8463e8ef60e60e2f721f62d52e42e5b10ad7481073017d47ad4d0616fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...