MAL-2025-187409 Malicious code in hyperion-capella-auth0-planetology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d73e61530abddf10af54e4b3e7e468fb6e763ffe1f4059aec6a0de811685b393 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186109 Malicious code in changelog-graviton-hadron-panspermia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4654a7b3fbdc91ef9d6bb9b21a92ed4ef7c06883f0343185ff0493e3af578e1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190018 Malicious code in typeorm-postcss-process-biomimicry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c294fc466452d2820a486df7e32926bbee267587784977a5dcfde6218f0c0289 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186939 Malicious code in farout-gatsby-install-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a7f6433fbaa7d30fc2b59bb25148d19c4d0981e34ff8d8b492a4e527fdd6147 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188550 Malicious code in panspermia-winston-phoebe-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f7b7300da63723696da5bb34487f2b3691c2b412646c248b4e7c69a0645b7cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189616 Malicious code in spectron-webdriver-nodemon-sedimentology-on (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60e790ec19781e6bae0e122b31564bb4f314ef39cee5af5b11865dd3d38e722a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189428 Malicious code in selenium-avior-antimatter-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42db6c042c566e179df6a1d7dedd3a0cf140b367c1acfd4d03ed2f557fe89d41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187372 Malicious code in html-webpack-plugin-atlas-global-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d76c400c13c978ef6cec8cf7e638527ede28cbd33c8bdda65e4c91e8e97c489e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188595 Malicious code in pegasus-hermes-greatfilter-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ee50216fdddd2b9a4492a2b16543b3394b245615cfa15ef569ae5075774044c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186907 Malicious code in exoplanet-titan-repository-release-it (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb748b13772ac2b3d0e6639c132da44357b100b1af4c90f2461a77eedc3a62d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185616 Malicious code in async-dotenv-pino-pretty-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c3d4a572f76bbbe274534a67699ee258acbbf21283e21f9c8957d006040376a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185575 Malicious code in assert-alpha-boolean-awk-mock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e450137c9d4b35cdf13297029db2f42393cd15a2ac56812759580390db060bc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189168 Malicious code in release-it-perseus-ini-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 104971ab1956bef5ba298bf575f621a9701915460abbdf6ed5d42771db7e9dfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187541 Malicious code in iota-levels-foundation-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00c2b0af1eef0fba29bf292945385ea48af585baa02b34ea53e9ae76e24eca73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190459 Malicious code in zephyr-auriga-node-config-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 501e4d8965e877980be3f3890f728502f5d0980ab23ca42e8fb0f60097b5f6cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185708 Malicious code in awk-node-public-interpret-cron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e72184d33130eb0661746bef8ae65da6a9d81b8319bca387ad8374ec909da7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190223 Malicious code in warp-jwt-mongoose-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8401e65a080266a220375bbacfb5ac32aaee20af15f0f37929bdad4bf41c1b29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188294 Malicious code in nightwatch-sedna-cosmiconfig-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f21f21d6be4c66b2ee15a78032e53be0a3ad159b0664bd39e8ecc869b9267f47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187716 Malicious code in lacerta-betelgeuse-xanthus-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3c6304ec6e85d47dbc95675de68746430ade85ec9fbecf5cad5c5ec8a058683 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190342 Malicious code in winston-writable-betelgeuse-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 618dfd248d0e1ba6168342765507ae920fd0ed18ce8cf28a99a494f55683c3de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...