MAL-2025-186186 Malicious code in cluster-sirius-promise-neutrino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 246366ab6b3632e7b423af9e451968b2bf746434d27260f7b68ffa2a924009ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187854 Malicious code in long-alpha-code-sun-table (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75cb602c6b94108ac0d207627555585711911a931cde0410f20974c8c45d67f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190414 Malicious code in yakutsk-alphard-winston-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42520c8dc3cb5fcd945016e4d3fca6d736c2b65f9e37c7c765d7c18be63ba45d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188506 Malicious code in paleoclimatology-cosmogenic-crust-kardashevscale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00e15ddb8489db7af6fbf7562f37b8fc6a58192ece39405003e76501af3efbeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189059 Malicious code in radiant-relay-castor-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59b307eb0d461a57aa2403eb54560b300c798532f796f705a3d5c5d94c8f7322 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187173 Malicious code in glaciology-venus-biohacking-dysonswarm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e18c4d2789b1847ce358a1f55e64a4f09d66af5edb4bee3de6b30f7d654fa40d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189332 Malicious code in sails-rollup-unuk-xo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b33fd2b89cf4ed018cf7deea569ccd3b18d23b7b1f0990df18111c52130666ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189776 Malicious code in superposition-unuk-spectroscopy-borealis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 447a420e2f7492d5062a141b6b5f5bf8ca06267753ff8c144ff4da6937865934 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188381 Malicious code in oberon-mdx-hydrogeology-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03f7ec2bd6822ff1708b0250bb0c57bd1da996bc00fe5b964037082fc9942ea0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190003 Malicious code in triton-subduction-gravitationalwave-sociobiology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d971551672fcbe7254864db12c049fec86d55677240ce555e99d0ab3bbca311e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188434 Malicious code in ophiuchus-blueshift-virtualreality-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52340530e8e3adf5630568ae9cf3e1425639cf4410dbbc5f52ee374a406b15ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187430 Malicious code in ignite-rehype-xo-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4a51f0740e1612c51322e453536c8292d2bc79861076bc5c2b152821856564f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186205 Malicious code in colors-nightwatch-antimatter-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45bbc42bfa0d26b381b4e233ad4e21cc124d0cba8b19be2bd2be1cf86e922a6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187357 Malicious code in hexo-steganography-cli-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39fd3e3304d9d3de6b3124bf1144ed9f9888aa9568a564da109abac7d783a34e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190371 Malicious code in xenon-ganymede-got-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd3cdb5311de65ffd938d7edee63411d617e2a115eb667ee052b558090a5c0de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188390 Malicious code in octans-non-blocking-repository-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d7187ba1a0c030038552b6c04bd621b070f3960051a0f7ecf52925ef761886a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187135 Malicious code in gemini-dactyl-archaeogenetics-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 024021df6c02db9e21ee90ac2aa96821f37266ff503afc54cb6f404fd6724214 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186719 Malicious code in emulate-await-sudo-code-grid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 754e83206c67625a2f588a8c5c27a9ffe36bc0e8ceea38941dc9bd3eab8690a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187581 Malicious code in janus-remark-thuban-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 570155d095d3eae650688dc844681804d9c1b15d9b0f5ab29768d385d842d4d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187266 Malicious code in halley-eigenstate-baryon-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6305f8cb03ad275db307d48635591f959125243697c79edc5eba8a7fb0ab3ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...