MAL-2025-185963 Malicious code in cache-less-venus-supercluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 659212101cca38f059209e2f0da10a24d153b7169e257a5f1253c0a48b3eba05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185761 Malicious code in bash-water-resolve-unix-error (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aa208583cc81c4598465e3b44b85048c1d4a747fe9087200fc8eabae365d5fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185423 Malicious code in aldebaran-stratigraphy-canopus-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9267766ff4b1707db860cf421d551cb04b2962f5b3709588c0aeacad5b716c5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185981 Malicious code in callback-upgrade-ophiuchus-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02a0e7ea27c39c0994bad0e12f99255722091fc3c0df8286c617e33cbe7a8d4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188917 Malicious code in proxima-ophiuchus-geckodriver-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5c7e0b28606987a99e1e5a3132f404b2435465dcff64ef832c045c0ce0f5423 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186462 Malicious code in dactyl-transform-nightwatch-petrology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6daac7520c355f3e9987d2acb56170e40385b4c9e7bd696c70bd2584a925b30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189359 Malicious code in saturnology-blueshift-parcel-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc4ca50082877acc2537bcfeaf9b2c9c124596a3983a4d9613ab7b63760f005f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186035 Malicious code in catch-bash-mu-daemon-slow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31096c13f4aea6a88a542856fb5bca32be9585f83bbf33f7d5e4134637ecdbca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186800 Malicious code in equinox-sass-loader-global-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c598cba85983700b376ae65af350b9c9e8d3c93e46a7d3ad8ddc8430972cf8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188007 Malicious code in metalsmith-ganymede-gravitationalwave-biogeochemistry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd371531b6504d7302f781d1d49aa918cc42e03fda931b017ec70b39844a114a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186580 Malicious code in development-postcss-loader-webpack-cosmicweb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdc7d279a0f29b5bca794be3e6921a4e2c28a76db57e85d79fa4f0cca9313cb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186025 Malicious code in castor-singularitarianism-parcel-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98bf1e4126ff3c9967e5cd4f8cd33d70f42c1d9b50c4e96609a7a751f8a28007 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186044 Malicious code in celeste-selenology-socketio-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3b0922b492f0634fa8fa4185e4b832fcc9ec8b78b6a8021ba713ef2be87ed22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kofi-cuauscdocavgopmoigbl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9e7902fe5de3e94bf90dbf988b24990628b0e9deab7ba6d2236fc662ba42fcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modasiv-kulvu-baiucauffuav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef51ba00f974ac0d8115382018c58cee9840093790a14a878d4b1d9a8b3ae9b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in olobc-uyg-ugiaid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 649335e29ba54845d0cdd408d7a22f255d70c86f94ae4d336a7417698873638a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutag-obolavduli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 276b04782d149811dc9305d2ecfbd7c083261dd68276b4e37f93efdb1c8a0d35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gocay-uga-agidufyi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1a9444a426b44ce29443f2bcd427532ff615d1d57d528ddd859750a2a23e8b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-oihg-mopfc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78c3155d3d7ab2795cf3474e82a3c33dd61f7d50ada0694860a0bb27a854981a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kofi-cuicn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f730898a07eca5561950cd74f7ead0724bd6756a10383ba3a4af731b8a3e3bee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...