MAL-2025-185579 Malicious code in asteroid-cors-bulma-paleoclimatology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c757cc0677aa2f8229baf844fe4422f081113cf652d25c7447e2ed6db0fcfb16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186560 Malicious code in deploy-good-data-double-unix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9f539fb8f3d51fa364bbc575962a64190641a7845e4ad288836f916b9fe9df7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186515 Malicious code in deimos-hermes-quantum-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da041c19408afda84511c39a5af5b767f425c262366c89f8688965f88b3639d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186613 Malicious code in dotenv-metalsmith-proxima-heliophysics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ceb78e459424812b988b0bf3d83a8d31009b68359fced3f68f72f84d8edc0e71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187755 Malicious code in less-loader-gulp-yaml-crust (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a37ba6b2766ddc09a8955e32126156706d18cd48cf81fa1da83c4c563b856dfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190442 Malicious code in yonder-webdriverio-lynx-blackhole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfbb715d4acf64ade15a47fd3c5a01c86a6a1ba2777dc7bb8b003d084a247a51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186933 Malicious code in extremophile-geochemistry-dendrochronology-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bea310cfefb66f08a96c3188538369447bd04612535e404ae87469b672b6668c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188262 Malicious code in nextjs-event-chromedriver-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ce4df6b55a16a8f6624b07812fea2d0e0020b2a6c4ee1553d910f9f217c82f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189864 Malicious code in terser-antares-markdownlint-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a63d74fa8c6808e660d5a31301107399d05e75ae04fa9ca5c2fc86eb0c04f105 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187688 Malicious code in kinetic-backend-technocracy-archaeometry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 441db525cc0b919f2d77662c5a7fab95e9af9fa464ddd5fbaf0397b903778a5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189738 Malicious code in superagent-loglevel-stop-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a6c222ed3fc6b5b431b69951f4f3dec5dc9dc593bbde310b59367cb4130c446 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187080 Malicious code in gacrux-betelgeuse-package-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6169441db67c1ad514453675544949307be78e6e2a8931aecea6222e243212c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190256 Malicious code in web-yaml-analyze-finally-short (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2808c21bacd5df0f6089eb0eddf3fb650035c91714558ba396f5e216b8d51a33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189721 Malicious code in subscription-firebase-buffer-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73b3d3ea91ba7e31304c70d0495d32342ab391701f8f85c6ef96e71bd38a1e11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187998 Malicious code in meta-fire-validate-refactor-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09eee909f08829879eb110a52e86f4be34210063ab5cf8d951247c485d8594d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189912 Malicious code in thermochronology-plutology-magnetar-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bc6d85290e6d099d7cb108ae13c434345ea45657af655f1a381cc6676289f4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188489 Malicious code in outercore-sync-fornax-lightyear (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9e2e853eda7b0af152340f61eb4696e8f76559b416699655d34aa888bfc5f7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188736 Malicious code in planetology-neptune-bellatrix-on (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78f2b23e9b8a39df059205b517a8ab6243a9cc96f26b1be0aa2c2639737a9919 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188281 Malicious code in nightwatch-aldebaran-stratosphere-bionics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec563d816b003e006c14699ca210e0cd8bb8c5d8147fff63a6131a9fed440e13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186702 Malicious code in electron-nconf-callisto-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc90748ea64a281a778df79da5f5d78d8439ba2ac5dd54761b15734e56d7aac7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...