MAL-2025-188354 Malicious code in nova-phoebe-kaus-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 681f4e48c75028980c66fada2072c099a609df92353c8804aaa3ee73fa6ee98c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187061 Malicious code in fusion-eigenstate-install-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad639da6e793d2159b795fb19d5682182fa5314233b975d0b111b1a6bd1dec65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189266 Malicious code in rollup-neptune-webdriver-manager-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9641ae1a94bc9e9e2736447da0d80427ac96de8cf3e3560ab39d02c7194a3db1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188527 Malicious code in paleomagnetism-neptune-jsonp-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e00b7c4e427afdc185348daac0c7d3815042fbdb19ac15e8d7e848299230aa85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190211 Malicious code in warn-bash-grep-array-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8bc328598631e616c53ed70b1dfd4a169e5b60020465e7e29511eb35b9d538a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188128 Malicious code in morgan-readable-auriga-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff939728ea7fa25c81887369da0440398d003a2c1acce70f1b5acf9dc29e82dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190182 Malicious code in void-oberon-supernova-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1662dd30a3bfdab50f06631023e83a010a07f87f264297ccff4a1f470029289c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187384 Malicious code in hugo-mini-css-extract-plugin-ophiuchus-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ab15840c7162a1c78bb10f8ff332b175c7f6472daf912e63eb81d372dc63e1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186410 Malicious code in csrf-farout-backend-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dbba3ecd123044b33d935f03d97d2a75be7a13c2dcaf66b322bb5df75f88737 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186214 Malicious code in comet-cassini-stratigraphy-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector feec7987471c96c90eddc25903afa8981be14519613bb15253dde49d844b22ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189387 Malicious code in scripts-hermes-pulsar-neuromorphic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c868f2b930f8cef33f4482af086921d64684fe465c818ac9af2b1f199e0a258 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185667 Malicious code in auth0-sociobiology-apollo-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2cc66bc3119f641f4265e679da99e399682b5bcfac97ff78b266bd68c7b2025 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187083 Malicious code in gacrux-figures-postcss-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddff144498a159f4f0aa53d17350ae7278a0691307113dbcb07ad4f8a5671e0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185559 Malicious code in ariel-callisto-commitlint-config-angular-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cdfea94216d46394d4f07bde016b03bdeedf21face4db3ada1a9424b0a6e4aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189155 Malicious code in relay-halley-ophiuchus-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb396d85d513ea55033743e3e16569ef6ba440da167e3113d6d3ddce6e2d6372 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187791 Malicious code in link-emulate-double-table-book (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f82ea3cfbf4ead6d879ce2cf3a4148b644434223de5718844f6f514cef0a842 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188023 Malicious code in meteor-fermiparadox-pino-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4475a2700a3887c2ee6f081004405d01e2a1578c2ef22298f54d0b30c7a1993 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188261 Malicious code in new-user-static-awk-zeta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9f9dcf7eed16e352a4e0fcdb4e1c39ec368864e56f59a7c610fef54ab9b66cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189711 Malicious code in subduction-phylogenetics-tachyon-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0d23e85fad2795bccb4695d01f55d114917b907a7cc918c35106dd514064a39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188077 Malicious code in miranda-lithosphere-xo-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f1eac87038018d949f144f833ce309a39c90f8dff7dca3d342001cc46bd9217 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...