MAL-2025-185730 Malicious code in bad-cron-easy-daemon-compile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ae4a12fd64affe0b52098d7c9e13114ad934f4465518a2aebb5e01ba6002b6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185636 Malicious code in atlas-enif-enif-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e642c8c15cf82070e938eb9c499479431db8e332a15d25abacc3ec9fce5d914 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189436 Malicious code in selenology-tailwindcss-cosmogenic-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8930f5ec5584cebb34ad1297b7e483e8cc42152b117d3b097a91ef8766b46289 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186603 Malicious code in dog-process-file-file-moon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4e1459e69ec028b22bba506edaaede14ac3a45a1b48d29ce754a8be9f0a3522 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188573 Malicious code in passport-auth0-levels-biomimicry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b0bee65acdf68a6737b8995d1143686b1ef9027fdabf5ae14fdd070cbbf7242 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nodejs-hyperion-quito-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffe47afcc4eb84693e5a1585a83da52d5bc58a56d4e82fc172e560abdd48700b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185992 Malicious code in callisto-module-module-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 356ff25afa3f90e1c8c9dcc12dbc8a9ac87666afec50cb83e076db197a2abac1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190151 Malicious code in view-visualize-nu-shell-small (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e87b26929fbb1f75d8efa9ab61151f6081a056a832e1c145064abd8cb24e66e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188124 Malicious code in morgan-magellan-public-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2a4010d8bb1de8e155f1dfe6a934c3701b7769ede92845ac847a3ee42879e16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189026 Malicious code in quasar-astrophysics-less-paleontology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 796dd3f919acfff7b29424059d3447b656538e5e1af0de86e836fd39ed3ba4d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yildun-cors-convict-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e182958aed938d1d33b5393ba2c0969ac423439fd20bc34e27524d9fcf1e2bf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185386 Malicious code in adonis-cosmos-eslint-plugin-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f51440d13be3a94db6138efdff6d65f7d866cbf0118a7f11859f4508a808663 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186400 Malicious code in cryovolcano-miranda-blueshift-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59449acb4cef3d9ad47b88923f58647f07f720c187506505b15d912c13c9026a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sandbox-table-async-void-export (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72eae7b8d712aa5d5e83ef1d75048d703c8d4e2aecb113194cc338645618df7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189530 Malicious code in slides-photon-nightwatch-stratigraphy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 444e670a73192fcb4bb106568c8db84e3d394ec118dc7e174a44da9d20b5a52b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185774 Malicious code in bellatrix-pulsar-bionics-cryovolcano (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3eabb8807018651b30cbf8b11bdc242a257d7ecaca2b4e19db523d7cd859aa20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apollo-aldebaran-miranda-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6d1896c35173f726b4ec506881e4897c4a13138416fcefbb01ece9e47041a06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188531 Malicious code in paleomagnetism-public-quito-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa0117eff0240cadd090b3d5d9d0e72ff394d66fc694fbac4b77dc2cdd423769 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sed-float-bad-void-stack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5126830f08c3414052bb9e255acb3f6e710990f3876503be68642689c721e9e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185657 Malicious code in aurora-transform-protoplanetarydisk-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58b1a5eda36b79e09cac5aead692171647a585f3ce244f8b85524005bd4e6526 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...