MAL-2025-185487 Malicious code in apex-aurora-xml-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd7d0a68560ea990b728310621a54435d29f21a74d08f8126b4956b41fc0234e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187072 Malicious code in futurology-arcturus-saturnology-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cee2cbdc2bc3dff01e44b79762d6c94d9ca914096274d79ac432f730d252e8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188904 Malicious code in protractor-xenos-aurora-holography (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1daf88a4cdb645adc2c90267d92d9769ac690de4b4cc3f0998b550fe6bf1ff1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190100 Malicious code in uranology-less-markdown-pdf-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c7bd429984bdfad6fb783aa98cdd8ab753a86703687e1e723fc3a2e3aee022d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187053 Malicious code in frontend-uninstall-foundation-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 689a30b58745647f6d8ae54285da6f284047816f0b89c8c04d4a4e632d5b81e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188232 Malicious code in neptune-vega-slides-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25682a3ed251ba5db9bb43d5f80a93426e070844ca49a329dde44e797627c644 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189961 Malicious code in transform-blitz-element-ui-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f0718911e1bd9246bcc62a5c6328b03e3846539f5bb7a874229116d8f787ff8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185876 Malicious code in boolean-balance-delta-visualize-resolve (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4486f7f8f007d39807ec34e7aafaa6a72b864684faedcf051d0fbbb27fd69878 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189087 Malicious code in rate-limiter-technosignature-genomics-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fed67de1e41887e575922c3c48b91c73df86c4b80ecf87513eab3bc52ed123a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187630 Malicious code in jsonp-hydra-neuromorphic-void (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d846a84569f47fde495902906da6a1389c1da17054f67fd652782bc62b8bb6b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185776 Malicious code in bellatrix-websockets-filament-biohacking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b482c2d556ba583b556025d321187a786b8b6b58a20043a55dcfaa188e66080a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cosmicray-andromeda-registry-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f212723cabf9a6a5e57c6a04ccc611ecfa4b9d6aa084c76ac18e7876b219b2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in test-sigma-reject-daemon-cold (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4d5779091401cd3ba770f292c82da9cbaa34004c715553eda2967832efced57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in socket-link-resolve-try-encrypt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d67a55af083d921f7f9ac00c877bed240fa3eaa206ab2eba52367102c6bcf86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in paleoclimatology-framework-mensa-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c12f313dedc707d720600d06707caee7d75a5cb19e5f99bedf1d25cd3c43b861 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in babel-dynamo-loop-terraforming (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77f7e19562ce05bfdec5a4c7e13077d54506b47b9aba65f096d2a73b18dfb64b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in atlas-browserify-rigel-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c9a528d585d1bd68f821a97b54d3810ac0f7fb130157b2815a5ecc843be8df9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in figures-materialize-markdown-pdf-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41294a6a54f63efb3d110086df70993ce7f964de9cd488774579c765e803cb38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in supervisor-cosmology-element-ui-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28afc8ae3541e417d775a5aab2fce980182eef544c720dae8a7ae1c4453d5437 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umbra-iota-graphql-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0216011a857c745443a164b8b961b2825a42498fd66c95b1ea56899885b894bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...