MAL-2025-188689 Malicious code in photon-sqlite-package-archaeoastronomy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7150a4433d6efb75ad9b3eccd02dca44b0b9102a6d9f95e0b94c56084c9e6b15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186164 Malicious code in cli-eris-cors-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e21ccc4b2c62bf4c996a5e3973550804784a618256801ff24d7af79770a5a6c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186202 Malicious code in cold-phi-cloud-cluster-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f0e9984087d6fc6265ee22bf94590da86323c7d97b5205d237579d0a5556bf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187390 Malicious code in husky-build-toml-troposphere (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00b004e07d0723764bfb0cbb6eb143a7cfbe71535a13c106188bd71e867b1013 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188019 Malicious code in meteor-cosmochemistry-parsec-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f018f42ff841a03bfe473a2be5b8a5c9547a9ff5fd7162c174cc4bf249906c8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185868 Malicious code in blueshift-toml-bellatrix-blueshift (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba781ce6e21bc8fd259330532a0851175ac241caef9ae72c818ba96369dc9688 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186728 Malicious code in emulate-wind-sudo-object-class (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ee210d97d77fbd8f18ec34a68a6a6a6dc453c5323ac10f9ea13c9ba1c530ee6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189428 Malicious code in selenium-avior-antimatter-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42db6c042c566e179df6a1d7dedd3a0cf140b367c1acfd4d03ed2f557fe89d41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187146 Malicious code in genomics-lightyear-mesosphere-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1443676fd94c32ffc79df6aede4df75f935ca9d1bc99e7c99bdeb9e440ebdd1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185634 Malicious code in async-yonder-void-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74902e60ac1a681b9bbafba9c3e430a5514f29d315ffea6a347310693dd3d057 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186574 Malicious code in development-cypress-nebula-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da745b9e11fa6ffe295744cf5037a33207878a84455b8a94772169f66e89c3f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185389 Malicious code in aether-dione-test-markdown-pdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb259ccaf3d1c636e4a75212af3fb8173b2ac77a1199ddb3181a1018bcf258ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189470 Malicious code in shell-integer-optimize-log-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45f7c1a43e5ae21f36403f8a689d673dbee083c6f11ecc57ca2355613d69ecbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189705 Malicious code in stub-scale-alpha-epsilon-optimize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b75f8b4a809808568e4e6cb14303729e4dae23ba42ce8fca5522267fd3e6f2a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187538 Malicious code in iota-hugo-mongoose-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a38d5dd37b1d3a02248bee4b3d4f536393bee7b92c3c8e07a12e1e35b6cfdb14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185764 Malicious code in bellatrix-bunyan-neptune-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce65e5c0135f57c3166ec660e1cd8880b62f46a712458d94ef70acb875d1c3db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189351 Malicious code in sass-loader-canopus-mesosphere-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfd6bbcda59d091061be1dc396ddc1689c6765b89ec42a4abe98eb51e16a4fdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188442 Malicious code in ophiuchus-polaris-mineralogy-proteomics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6990907cf478a6777456e1509b1e4616038bb303ecad91eb09e0643fa34aef14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187833 Malicious code in local-ariel-elara-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baa489e4c2ddf5f4b238f4e89d02e3d3631e672743ec0775984f02753467568d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186570 Malicious code in despina-publish-spectron-webdriver-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c96b02a08c822eca34bf2d23c33a2cc000664ca7467c6f82190e3f34e52328fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...