MAL-2025-188585 Malicious code in pavo-auriga-jest-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2636dffbcb00a70df12da05821d52ea1134e1edf132ee3bec849bce1eae714f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187578 Malicious code in janus-proxima-commitizen-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24a6bc4d9a93910a9abfe155b6db4918073a892f906dfc978e9495bad17d4f84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185624 Malicious code in async-lynx-lithosphere-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43ec24e13dc5676cd39326afe618afe0b9e4435ea88c7c601c8b2053d26a6c81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186915 Malicious code in exosphere-galaxy-planckscale-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df1cdeedf02aa2f4451ce4bec2e0bc31c597a3db7029ec903fd03c1f01cf65f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187332 Malicious code in hercules-config-juno-void (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f4cd30f00323af7b524f61b17219f21295d6d27272c1dc39765553c6d27266b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187678 Malicious code in kernel-stack-grep-zero-table (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8586af4b87f0584e7f4565c38a5854e41b7072c3d9a2187bdaf4eed44194e82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189357 Malicious code in sass-loader-prompts-inquirer-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8510e31e6aebe1ba6798f088e0772983d71667602f005659f7f54fddb9b9facd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190173 Malicious code in visualize-object-xml-long-sigma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2adad1da1eb5a45ee27e59a75a9b902cf303eabc80616c3b102fbddc15b14ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189087 Malicious code in rate-limiter-technosignature-genomics-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fed67de1e41887e575922c3c48b91c73df86c4b80ecf87513eab3bc52ed123a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190400 Malicious code in xml-sails-cluster-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e47d11e94efa1d8dcc50c9b7719f33a12c4ac87761659e74645fc502db56b0e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190300 Malicious code in weywot-less-meteor-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8542102f9f4ae3b048464b926a5ab26eb49cd534e4e12a528ad808d7a291bd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185826 Malicious code in biomimicry-kuiperbelt-castor-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cad2bcd54635313a28e29d24a2fc5ecca38fe189b939fa57f7af1e460466698d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187985 Malicious code in mesosphere-bootes-primatology-levels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a8eb4476e67bc8ba2d8ab0e4bd9d74c8303fd6ff5f358e8668ac8c8457cf414 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in juno-eleventy-prettier-stylelint-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6a310c6f44311b90b0c366863dc1251a35c2ec6b74bb4561c289bc7facabed6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shelljs-fermiparadox-bootes-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8199a85992f315d21ea68c13b0beedab66d67bf10eae645fc8bdbc5cca7e9cca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188024 Malicious code in meteor-geochronology-element-ui-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b2fbd4a4d8c5dac51c3818c36571c2e2edb4ecd33469ce0e9a4d8cca5ce837d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190125 Malicious code in user-lambda-decompress-benchmark-omega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df1bdd5516102d254db4d781c94a6b7a174eb937188ea61c00e3590d7c38cbcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187090 Malicious code in gamma-char-visualize-moon-daemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91808148516e73f132daced2f432b7c2f829ad7821d229f086fa5904c51042c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185946 Malicious code in bunyan-jasmine-winston-geoarchaeology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fa105000e7cc509705628856a64c489581c50221c6ae02d7ad46d875a191553 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189947 Malicious code in toml-json-express-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e3cbd03b3937d2d33a6253b82a0a39f4f6f81fd66eebf439e0d0ec0bf26ce60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...