MAL-2025-189224 Malicious code in reveal-md-cosmos-apex-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e367e933db82adf380c201474730be581cbeb3d554deeff671fb4bf308f2788b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189087 Malicious code in rate-limiter-technosignature-genomics-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fed67de1e41887e575922c3c48b91c73df86c4b80ecf87513eab3bc52ed123a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188115 Malicious code in mongoose-odin-rimraf-petrology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b3175aa112348afdfe90cf7021d38d6aa613445ca9d922956429700ee421e33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185454 Malicious code in analyze-signal-bundle-query-mock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e9ac109472152832caa800b02a3b34b918e75736ec1e24c065add9391558992 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189405 Malicious code in sed-shell-cat-encrypt-parse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dffcdc4ce5b51e0f06b29e455b78cb1777be3131adce3dd6db51c4bb2f860476 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188673 Malicious code in phoebe-magnetar-biogeochemistry-vulcan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ade61d54871eee7b1070178bed51f51b707d0f7437a45a74f0efc2158fa4a054 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186925 Malicious code in export-zero-orchestrate-zero-compile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5af09b797e4f7aae7c05dba3d89244c143d4393bfb4489b7d6453160dc763868 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186157 Malicious code in cladistics-virgo-transform-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 994bc4952b96b18a4e7942486a5ecd1f6f2239be14f0c987dd49fec7884cd8b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189718 Malicious code in sublimation-sadr-magellan-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 430f76d8e92d8268cdbaddbb529572984b353efa027adb0b91de89e552597f57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185448 Malicious code in analyze-abstract-hash-code-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94747fbea6244359c0e5f32c8af9461dfd765fc51d10bca1d94dd3e3f0cef6b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185945 Malicious code in bunyan-cosmicray-membrane-terser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b4471f65172659b77e077d6695a1c3d2f3f22eaa42d8c5b536dbe439b313924 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190362 Malicious code in xenobiology-darkmatter-fermion-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b98aaed19411a873cd6ace71704b7552245706c937d1d0c567eacb7b6f27a492 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190164 Malicious code in virtualreality-abiogenesis-passport-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 216de1758c390287dbbb13dfbd2b313f02658117cb686365a5d236b6ffd10c7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188247 Malicious code in neutrino-thuban-geoarchaeology-sadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a133c012ee6f1981ab4337dffc8896165042f9b0488ca4dd9ce420ee03e3390 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186034 Malicious code in cat-void-bash-cache-bundle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 778f07c6825f30529d578e5e0b9222d362189c07821fd7aac30de9ef4b174d12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190219 Malicious code in warp-boson-callback-supercluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c95312546c36f2f246c3a72e1074b30f6d60280d986fd0cd2fc73fee683e7972 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187930 Malicious code in markdown-pdf-auth-neptune-optimize-css-assets-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edeeb03d25b128fd84b87b2e7eb8c732469db592c485a2eadbb54f27cb71452b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188049 Malicious code in mini-css-extract-plugin-paleoecology-redis-release-it (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5de46289f1110a24c23bea5d0e9a23619502d2752909ab64be08f9fd83e00ab2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186390 Malicious code in crust-thuban-archaeogenetics-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1d77d5878eb84187eaac9705aa2e1f130b0c1a6d7d56c13ff36950c3de33028 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188040 Malicious code in middleware-fusion-gemini-rehype (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92ab40641c6da304cc6922285105d49ffd9eb14410326e1a5f260efd9270fb7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...