MAL-2025-186774 Malicious code in envconfig-passport-charon-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82a913dba1da1b938c98f9b6be2e6a3d983d34324af40a2987f86fdc7232dc2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187172 Malicious code in glaciology-nconf-eslint-plugin-farout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dd9bb4030c257a4e22a70c445b7bbec7d468e091211d5f691bb80ea288ee8ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186974 Malicious code in filament-xanthus-bellatrix-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c17c5dd3847eb026a39f61d0b1eea2e94bb28158bfca7e95c14efaf49ea10ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189807 Malicious code in taphonomy-phoebe-mineralogy-cladistics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6d0b38ae49da146c24c104347787c4c7f2cf17fc32dfd0d2761d705c9870097 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189082 Malicious code in rate-limiter-chalk-miranda-cassini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97dbf12820a23efa6071dd559b66e1fce9c4821a398877a4c63e432d20b01f2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189443 Malicious code in sequelize-eris-europa-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3eccbd4b1bb7d5335c4aaa91ebd9e32a321a8447290883e3cbf50f61a29cb747 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187474 Malicious code in init-charon-terser-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3508eca342f082f4e63f5a94b88316894ac60ba0b8e0ac588455e64488807bcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187751 Malicious code in less-eigenstate-eris-mineralogy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77108ac43c4067f2b2b30395cd971409d60596526481a9d008575809b6265deb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189301 Malicious code in sadr-corvus-janus-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 068cd6224c2679afa1600ed26617858272747c6b62a13b0ecf5889b1339f36ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190167 Malicious code in virtualreality-bootstrap-geochronology-nuxtjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be79ba73e6ad03713c9493b36f0c5582b051a8d5650e4af98e8b737179a3b14e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188027 Malicious code in meteor-lacerta-fornax-cryonics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ba1bd24776a3f69180c132bd70b8afbbc2328c0fa93eda6da0df9e3e68ff38f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189714 Malicious code in subduction-xenobiology-websockets-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9d162d50d84dbe43de8e35e175e07f1bac8050e4acec2b8489426a438367ec4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188178 Malicious code in native-electron-builder-nashira-tachyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2c326aa33890289362406cb0f22eec8401d0b31d237121e8667b24eaa89de69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186938 Malicious code in farout-enceladus-magellan-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f03292d746272f6367ea408c0c0087fee9c3da9085941219a55a63bf3705e7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186760 Malicious code in entanglement-levels-leda-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e292447f2134db338338d63f8b2a16b4bc83686c388f6b6c05cd2d77c971844 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190008 Malicious code in try-benchmark-assert-module-protected (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de000d26f24e3e19f3f26d9ae4f37d14f920af6a5f0e283d3985c12f1414f4db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188556 Malicious code in parcel-farout-webdriver-manager-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0323de8abc57e066c52e4d4f9edbf96b4ea12374385abf4cf5c1c36196afff25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189662 Malicious code in static-stub-dog-epsilon-final (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8517a46e26020ed95dd1167843ddbca884ce7dd5332da1c398e0078d7e5edc95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185414 Malicious code in aldebaran-biosignature-darkenergy-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86ea8e131d374cb063a0b842043d6ab3be61a8a7771fcf3a8ccd89092e836b68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186601 Malicious code in dog-book-protected-scale-grid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50e2dfc946835cb804fbf4f49f9dca6adcc7592bdd9880a1b5fc2f3e866af4dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...