MAL-2025-185500 Malicious code in apollo-dotenv-parse-variables-stratigraphy-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6b6bff1ebc61f26c983aa31d04f318f822c5eb75b154187650b15d6904971d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189306 Malicious code in sadr-nodemon-cosmology-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fde5e4eff09a33f1389f7b207284fef123917e01d69344dae811a66121796ebe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187866 Malicious code in loop-quito-hyperion-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1026aa50dc1e0844d749d156395863d5338ea4214c14c836f4ac9d9e3515500 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187562 Malicious code in jabbah-pegasus-umbriel-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa305b62d59cc4fef7b21f6541fc211cc89fefd1acd2aeaa45a6ccbbf4c0ef70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189360 Malicious code in saturnology-darkenergy-sadr-paleobotany (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab539e896af1b7f48ea627c96b9ffd7a622b3e04fd2e1e71d82e26080d7deadb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187500 Malicious code in integer-lambda-notify-cache-try (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf466c2e7690bbd0f6d1127bbe1eefc6ee2fe3891877043b829d3b2a3ebdaf01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189746 Malicious code in supercluster-command-betelgeuse-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75c4312f9a8f4944f7302c2d84d8f462d661b5c52a2451094345926045d0e847 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185734 Malicious code in bad-info-encrypt-boolean-simple (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30d7b093a3c4eac924dc700eb11d1fa0c68214e3d89a9a8ef9929438ab50d583 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189994 Malicious code in tree-notify-report-decrypt-scale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0ef817bc7ba20de74ad100abd2f3c54d81b1f19ad4c85cbcd2f81b282282fdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188367 Malicious code in nucleosynthesis-backend-local-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12f0e575dd8081f33d306cedbbefbb2c089c82765433643badb89e418944ac93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187380 Malicious code in html-webpack-plugin-wavefunction-local-ora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9b889caa4d6bb6e7f090a2532d0cdfd4fc1ca62791b86087f1d8923688f6937 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189223 Malicious code in reveal-md-cladistics-brane-blazar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3aba1890cc09a73e9c729e70b806349b00973870edcf90f85549e6e946745d97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186460 Malicious code in dactyl-loopback-axios-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94ef9b4077e3c6ce19e631255d57d1edaaaa35e2479ccaad486e1d3e0d6f9a3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186316 Malicious code in cors-centaurus-electron-builder-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector feeccfb1d261c6ca7989d2be6cee1c0b020d5eaa19f8a9d0e008e8d47573304c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187373 Malicious code in html-webpack-plugin-deimos-toml-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bb045f13fdeba200e83090bae2409a07346335c9f563b24f275cd3404d87132 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189072 Malicious code in radiometric-proxima-ophiuchus-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42e4cebbe5b73c636c28c777ed6499e4fb906fcc3ffa5a700a0f16cd85821770 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190426 Malicious code in yaml-iota-jasmine-norma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8425bb6b7f07910bd25a68dfefcdb32430f54afe0d64a10bd237cf2ec705796 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189032 Malicious code in quasar-oauth-perseus-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28472317cdb1fc5348cf5966fda3fd7258b958bfe4a734759408ca8b0ede0160 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186586 Malicious code in dione-dorado-apollo-mongodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dcbc7931eef29ac5c5af7ba06802424115895cf2f3b63f7ae23d400ffbdde7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189026 Malicious code in quasar-astrophysics-less-paleontology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 796dd3f919acfff7b29424059d3447b656538e5e1af0de86e836fd39ed3ba4d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...