MAL-2025-189674 Malicious code in stratigraphy-archaeogenetics-pino-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c8b8215edc8d75314fd70706553211c18d60e357ddd2ba33d98c9aebc7bfc32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187288 Malicious code in hawkingradiation-aether-mesosphere-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b33677574330eb0f97322854d638a9210badd223d764bd7216dd99dbd4dd9d14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187925 Malicious code in markdown-electron-europa-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da241035c8c6043578692ac4ee05dd47f6b4d6d0a9301ddc80f8497055acb487 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186741 Malicious code in encode-route-deserialize-eta-export (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4849f20d06c8c3eb71f943fcebe44c6e682e2c94299b7465ea7d58fde0889c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186819 Malicious code in eris-slidev-iota-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df597c8562db9900df55e7a3e8d03179009373f184183e35c90f96a6edfe0739 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186083 Malicious code in chai-prompts-auth0-geckodriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad324c4ea61642de7103f9b9dd8dbcd82c0039694bf830c253f7ff3fe81db1ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186305 Malicious code in cordelia-cors-lyra-accretion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 644f7a8a9d15a00959af84e0feba9ed8c935a3bc1ad53d9607a84119e0769181 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189070 Malicious code in radiometric-native-adonis-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7a905c6fbd44ffe868d328f759bc5e0ebe4637155e3c9cfa9f4b6ec27256292 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188992 Malicious code in quantum-cache-nebula-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d3d89d79894f894432d6bcbb8cb3e71bbf07e3fa485b1c79e450c403cbbd96e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189131 Malicious code in registry-relay-electron-builder-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a67c1995ab1976896034e028ee640c5ae740b13db01b79296b2487d4d3fcf022 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187844 Malicious code in log-cron-execute-small-signal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32ec0696cddf358459e6b9b0aec5b76429e12fa22f595e5ae35b4eb9f8182d61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186247 Malicious code in commitlint-chalk-neptune-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b475ac7ac71842a68d453cdd91b991e9c197bcdeaa1c1e63eabe9242691e332 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188698 Malicious code in pi-validate-water-test-tau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ecddad273b22a7a6a747b0fe0d76b37f55ab197c1c73ad7f8f48726d7bb7c1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186993 Malicious code in firebase-selenology-blitz-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ba84248994554254847bbbe7d4d7c2dffadaba57bdad95b53540b7220944baa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186130 Malicious code in chariklo-sirius-relay-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36395446d117db20dfc560238e298b2ec80005ef394f3218019c4bc3463d8854 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186887 Malicious code in exec-local-mongoose-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b872afd1ac291d4ad9a6557070b1a111c63c386c84d16d9637c174bb6e04f49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190455 Malicious code in zenobia-rate-limiter-cosmos-csrf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63628192eabab4fceeb1ac6d15980c58c5e6ed660a4f133745da0209a59ffda5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189590 Malicious code in solis-promise-janus-aurora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be3184b211abe21fa68abe734f23a5e3a2974e348839412724fd29abecabeb8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188127 Malicious code in morgan-react-bootstrap-cz-conventional-changelog-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d40512e96d10fee42975d7328b835e1915a6224aa78dffa4f19048edf1a51d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186194 Malicious code in code-interpret-finally-decode-cold (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bda77329400e2d6d937de5ec4642461363583de5cc3bc09ba36c5270ced52d51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...