MAL-2025-189205 Malicious code in resolvers-typeorm-dependencies-development (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5dd2a238d88c0adffe27656503d08c62254216af2d36d818b92df13f4db3c0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in interstellarmedium-coronalmassejection-hadron-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a445cac5b8c65ed165f968e49394f1d485b9e541be9e0b2c076c6189c278ebb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upsilon-sed-authenticate-await-tau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dbb71e85d3dbf6177dba502876c0dddbff9a6bdce3581eed3cf2d973df98356 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoebe-react-bootstrap-heliophysics-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68274b408b6fb2382a5f5a2aa275eed20c2fe6bf4f3a8f6a33645d810c97545f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unuk-loop-mdx-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 295429884cb23c05cd22de2b6bb4cfe7d99359296b20883aa2aabebf7b820b72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in passport-wasat-javascript-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee1995b86a42719390fb786ee154c612d1535a6ce9c7c97401e18f9ec57b8367 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in paleontology-lyra-hercules-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6719be20e59d8b45e65d841f7ecb4762b0113345b1250aca102c4a5cc12ac0cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in paleoclimatology-nova-rollup-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02798c4c1a995a4759454c6aea2a564c68e1924207dd426345f7fed7eb2c815f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in membrane-genomics-passport-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95241f9307b7f8fe74ca59b24e693dfe55cefd7a067a458723a3ae43b1aef6c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quasar-backend-altair-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35756d40a25a4bdb4052a566e3b66b63592849244ddafa63fe0a0df31a150e39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flare-polaris-sadr-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1ed2baf393192b5d6507e61ac34292a1a2f72fa14241f210bfb3dff96c5dcb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenobiology-darkmatter-fermion-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b98aaed19411a873cd6ace71704b7552245706c937d1d0c567eacb7b6f27a492 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kappa-encrypt-public-rho-boolean (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 656709df41c0061ebd217bc1f9d8008060baf2008b8c7f3bdce9147727b37576 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quantum-child-process-vulcan-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db5c7c674775a7060b2695cecbde40c0352fea9feb3cd9e5e0c26845c229e764 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in postgres-proteomics-markdown-abiogenesis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6860516dce9a9d7e0ede3eb6cdc0557443c2c6fd995d1d86b1226558ffedea50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in on-quantumfoam-nebula-cosmicweb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d58c1cfcb579fb334f21a1208f5ba22ae4fc14bffe6418fcd65e27dd13c7715f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in native-callback-prettier-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc0dc311373b2931d044adb4e40d0af9e1e9bf640554855144ae6aba8b393488 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odin-nightwatch-singularity-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d3c3514c74c10761cf5de7d75f8f020b9df8cedac55d8dd56c69d1470045cc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astrobiology-loopback-hermes-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86c1988f451cfa884062cc5ace32bd4d584c3db831f89eb5d23883e30f4780e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avior-atlas-draco-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a791d62990ebf89a04fbe1533307e4dce1c2a0f5b13b29a8e03a05b77a2226e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...