MAL-2025-186167 Malicious code in cli-mdx-galaxy-xenobiology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed70162841564f001e1b03f2943fded9e5dcebe6e7aacb659f89a4c999ac941a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187563 Malicious code in jabbah-titan-eslint-config-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f920754dfd3526e4037f94d1ee2ae2205d9eae6df972819a37ff0a02087f6c79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190040 Malicious code in umbra-mensa-bunyan-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7cd34942a4dfac6c4497a53e8b881b509a19d9a829afbb5b395e04cb5424ac8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185495 Malicious code in apex-tool-colors-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89c62893645bd2284f60d2079d955465a378a688d945047e235e72710ec44a8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185522 Malicious code in archaeoastronomy-prettier-plugin-markdown-backend-archaeoastronomy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 842dc5b77aa3861dfe0db40dafca17529b5f5ff542199416db4cf136ba3c5db8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189769 Malicious code in supernova-saturnology-asteroid-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7937459b0c7fbf26e6ce76e53b247007a9cc5cd25f0a634fc670aa4fe393be64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185419 Malicious code in aldebaran-polaris-materialize-xenobiology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17cdab6672cb9c2ed6728b1014033a902987d96a9e4564b2ae56194180753ab8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188830 Malicious code in private-toml-nightwatch-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c83662ffbbdf17c2aa4ce2a64870ae6d6728121491ccebd14659d7a55f9536b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187657 Malicious code in kappa-eta-theta-sandbox-user (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5274495a6c05031146e800213ab1b1e42dc632a5fe4124ecf87ff927338127a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186027 Malicious code in cat-air-xi-slow-visualize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fefed3200aae9b03b2b7c8bfb5a00098ddc2ba15609c9a4286de08a7b8603e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186857 Malicious code in eta-sed-assert-spy-hash (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aba02fba2294b944dedb22735bc1a124430a994c135af1e2b1361494f868a743 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188946 Malicious code in publish-antimatter-augmentedreality-hawkingradiation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0d5d6b123e34a8689a89de8c4284bac809a0af916cf5f51956e0bb8bcf35c67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189403 Malicious code in sed-secure-rain-water-omicron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dd93355c379fb04cebb47c7a76029b9ecbc852e8bbaae7413f21844b2222cb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189729 Malicious code in sudo-reject-mu-proxy-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71bd21ebc82601b1500c1ec0b38beaf261822f483579359312b433a31d3a139a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186011 Malicious code in cassini-halley-jekyll-less (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfd52a72d246c6814a27d6224892b221e16e0799cabb54223fb2bf8d9bc57b74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189706 Malicious code in style-loader-lint-commitlint-config-angular-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8cc7034db2bf2b29cbef30f37f676c749b2e7344c4c083c202ca781b42d37c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lyra-xanthus-csrf-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b0400e33310dc0a2fd44e038192baefeffcefb683ae979ca17aa648245da1fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fomalhaut-jabbah-telesto-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c409db8add4aa2d4cef18d1ff2a7a256965f5f053276d7ecb0d2dae9c3d2ff57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ablation-scripts-pino-terraforming (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a09232844c3f2e307a4baaeb5f7c22f13f97475a8f4da5286718e6fe1f45b2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sadr-cosmicsilence-paleoclimatology-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab6e28b764f010592962db4d96f68cc9d1486f9d875274459745f1bf160ea2bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...