MAL-2025-188505 Malicious code in paleoceanography-shelljs-umbriel-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2386202e5955957868e619896d6eb531b3f4a1f167c4964e7c4ce5d273871974 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188492 Malicious code in package-nconf-antares-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf4caf3fa0344f2aee63fcd6310c26ee30f4d3e8d913a64bafc82bd31020a0ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185868 Malicious code in blueshift-toml-bellatrix-blueshift (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba781ce6e21bc8fd259330532a0851175ac241caef9ae72c818ba96369dc9688 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189920 Malicious code in thread-link-code-stack-old (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0332ea06ac8e14a11d6373d745a8c9acfba7cf0627fbf54277743d4d2dcd8414 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190299 Malicious code in weywot-astrobiology-biomimicry-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33ab409a95035ca69c063d26818d399f9455f7783951de128b164c4b145ac392 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188593 Malicious code in pegasus-deneb-iota-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f09829ad648a30448e6909586b77ecb91a7d0c11ed07ed4042c386b13811abfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185611 Malicious code in async-buffer-cosmiconfig-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bba737275085236d631d085f7ea2af519c6a7de3107578c0603efd3f092802a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186506 Malicious code in decompress-simple-lambda-container-meta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a56f01a80d1fe9a2a4e14344b3a37f67f649c9c2f15d90b3604f6dc5c138e22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185806 Malicious code in big-tau-stack-root-compress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4589efda7676656b37dde7e69e0fe24d7b7685946d2b91de4fbbf0757782b255 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189272 Malicious code in rollup-plugin-hugo-library-biotechnology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebfcbb6aaa74c1d1e6c43edf9bb28be471d6d94ecc5523308acc2dcc9e68216b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190127 Malicious code in user-reject-good-code-sed (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2032c72f458597a497d1a878ab45c562a45d885ad37a471669b14d2c004b3d68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186552 Malicious code in deneb-terser-webpack-plugin-lightyear-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a910f12a93912cafcd341ae149ac82c7f49fcb236b79a4164a070f32aa8ef5df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187357 Malicious code in hexo-steganography-cli-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39fd3e3304d9d3de6b3124bf1144ed9f9888aa9568a564da109abac7d783a34e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188333 Malicious code in nodemon-heka-wezen-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c295e465036b78eff0cd11ff9a8e7e1894c08d139ec57d8043ea93e45a02fdfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186314 Malicious code in coronalmassejection-sirius-morgan-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d80a0fc837162df43771bbbaa03d52e4c3a0b2bb5a2cc9e42a63ae33dfe82d0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187537 Malicious code in iota-geomorphology-rate-limiter-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 346e3847a3afae7b06fc9b4ad231de81c16e9d099a34651a5080fcd332454451 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185876 Malicious code in boolean-balance-delta-visualize-resolve (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4486f7f8f007d39807ec34e7aafaa6a72b864684faedcf051d0fbbb27fd69878 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186045 Malicious code in centauri-cli-transport-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd6ea24fbeeee105ca193a62e5857465b996bac0d4c5b8f72086246e1f61c665 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186015 Malicious code in cassini-pyxis-proxima-isostasy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ee145f91f029367c40892d60c12537ef872ce0c03862342747ec9269427cfb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186752 Malicious code in enif-jsonp-abiogenesis-kardashevscale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8b22f36cb4b2d6415da8f96733035044e7577e5c9894582adb34174a67daf2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...