MAL-2025-189718 Malicious code in sublimation-sadr-magellan-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 430f76d8e92d8268cdbaddbb529572984b353efa027adb0b91de89e552597f57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189684 Malicious code in stream-indus-dendrochronology-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcdf9efe1fac494c78e0dc753729d3c091e5206d94dfa78e6b2352c83e1ddc9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188967 Malicious code in pulsar-crust-acamar-technosignature (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca5355cbd68aac1da711412886e7e3a77b66c193fddd4cfb2ff2a0ed9e7726b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187930 Malicious code in markdown-pdf-auth-neptune-optimize-css-assets-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edeeb03d25b128fd84b87b2e7eb8c732469db592c485a2eadbb54f27cb71452b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185624 Malicious code in async-lynx-lithosphere-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43ec24e13dc5676cd39326afe618afe0b9e4435ea88c7c601c8b2053d26a6c81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188049 Malicious code in mini-css-extract-plugin-paleoecology-redis-release-it (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5de46289f1110a24c23bea5d0e9a23619502d2752909ab64be08f9fd83e00ab2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188040 Malicious code in middleware-fusion-gemini-rehype (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92ab40641c6da304cc6922285105d49ffd9eb14410326e1a5f260efd9270fb7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189554 Malicious code in soap-commitizen-markdown-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b53fccb69500874953f39548c3d62dcc571d4b8fb7e15d1fcad2ffb8ccf05986 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188053 Malicious code in minify-mu-catch-authenticate-user (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac3b2212cf649bbcec1267832b53976a224b9a0387e17e082b8641dda41bc920 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188673 Malicious code in phoebe-magnetar-biogeochemistry-vulcan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ade61d54871eee7b1070178bed51f51b707d0f7437a45a74f0efc2158fa4a054 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186925 Malicious code in export-zero-orchestrate-zero-compile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5af09b797e4f7aae7c05dba3d89244c143d4393bfb4489b7d6453160dc763868 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186272 Malicious code in concurrently-ultra-protractor-paleoceanography (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8ac6469b7fc8ca0aa3812f2e8c20c629f6f386ea3ef2bacd4759505f1bdff6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186390 Malicious code in crust-thuban-archaeogenetics-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1d77d5878eb84187eaac9705aa2e1f130b0c1a6d7d56c13ff36950c3de33028 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188891 Malicious code in proteomics-terraforming-exosphere-supernova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08be7f7bd82ea7f6548ae9fb6c2fa590b0f954694b20efc97d5b88d35e932d16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186064 Malicious code in centaurus-neptune-css-loader-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0908ef85e2b7fe9360387bd155ca3c553dcb970ba235726eda56533fd71a985 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190281 Malicious code in webdriverio-npm-supervisor-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4759ce7fafd7b599f2d391dc859e66d40f9d758da169a2303128f81734a831f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190290 Malicious code in webpack-less-heliophysics-wavefunction (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e8987f4d7ce795a5f2186e61fa899436abfaff67309bdbbd27646c1723add64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188383 Malicious code in object-authorize-array-cluster-encrypt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34246e08ce2b9bcabd787f7abb0f7a897edd5a188bd93a724061606b70cee008 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186333 Malicious code in cosmicray-andromeda-registry-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f212723cabf9a6a5e57c6a04ccc611ecfa4b9d6aa084c76ac18e7876b219b2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185993 Malicious code in callisto-proxima-command-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cad0a7c61c821a3f3b7a8f908f59e257f6b79a1afbb456f7f9a8da57a2b150a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...