MAL-2025-188502 Malicious code in paleobotany-perseus-draco-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e95a9252255738e39fa00227391b21d62088949c92c1eaa51e5d55ca244ad53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189278 Malicious code in root-cluster-bad-final-rho (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e40f7f5e09039c8649780bc1df2004bbac256e735a86bd382908a03f1354e3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190280 Malicious code in webdriverio-meissa-terser-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b8566a6641887982db2205f4d70303c4107005dc5398a21da2d4cde72b86274 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190187 Malicious code in vortex-husky-sqlite-exobiology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90045f94e1d9d66252d467fa18357ac19aac151e5ea708173e4ac15adc8779ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185599 Malicious code in astroinformatics-accretion-dysonswarm-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebf69323bf479cc5874cafcc0077c2229dd31319e197f5222ed445892ce4d910 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187733 Malicious code in leda-hercules-restart-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51a19c1b6d4de1af3ae3df060eb4f4301b9159c50ff7eba583262e1dcef8bbde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187936 Malicious code in markdown-proxima-markdown-geckodriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b213acc5ca9f1760d64992f1e2015034abc38f9c8fa31f4bdd94974225fb7bcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in remark-loglevel-process-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53b2cdb762f4052d4146c3d2d35d10fe3fe6516343cf764c76cc9a051dfc4474 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in virtualize-kernel-string-cluster-mu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d02c544b6174c41d110ce11583c5dba92e8bbbef11967198039392a66f0ce6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pyxis-asthenosphere-astro-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e95609c121da15ecedcbd3376b1932b6054e994e0aa2a3f7a388be310bf6c3de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187438 Malicious code in import-proxy-cron-balance-abstract (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fc1ec58f88db65ef37f453763c2850aa34c61344a704725c6db3c7fc21bea4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188520 Malicious code in paleoecology-stop-javascript-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73cd29b722d214d6b0e2acba9820180b2e3a620c3035601ac2c24612996b23d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189230 Malicious code in rho-enum-secure-short-proxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc98f3a6c284cfc1f088763be06cffc4b095839b8639d60ab0dc326aba9d00a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187890 Malicious code in lyra-fomalhaut-arcturus-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53096e7800c4afe7142f8895c571a8234b3cf07054a65f4b0e757e5cbb5d578e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186550 Malicious code in deneb-parallax-aldebaran-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62fdac9fb115059473ddb39de7308936fb34fee96693299f3e1aa1c9d0719d33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189292 Malicious code in run-script-sagitta-pulsar-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 301093ba1f19945b67f4a51c33b12c18edddc6ceb26f3c8bcb80daa80505b50e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187963 Malicious code in mechatronics-quantum-jekyll-jabbah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 844727a6f4f0c7890a89152de5b46515e0e08e486b4583e089e3d39f32631aba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186913 Malicious code in exoplanetology-link-commitlint-prosthetics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bfcec8783f7472850817c3503803a35451836d28a4f9dfdb5f2a6cddf295c61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188978 Malicious code in puppeteer-exobiology-semantic-release-less (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 492b2388e50d217d03a5e5f9711d814fffbd1724cb17c2b745d1d05ed86fbe9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188615 Malicious code in permission-resolve-function-fast-try (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 459860edf67e24cf65eba1b81de8a35d10e8de00a10c131af68c3734515c11af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...