MAL-2025-187052 Malicious code in frontend-kuiperbelt-proteomics-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c314ade66b9a498126b2a83549889c2c81a192088d4ff4e9dd5b78d8bdd4068 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187011 Malicious code in forever-heka-polaris-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 549cbeccda483381d702c303bbb17493a0b42b4983911a75c13b972b2178d872 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189727 Malicious code in subscription-resonance-singularitarianism-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be3d538e89b0e03b53dba84331df4a541fdba75060e63458115cecbc1e951691 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187493 Malicious code in inquirer-winston-commitlint-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8d8803b934bddaa10af678e2f1095520a0c5df75893b63ef2fb45b3564318c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189601 Malicious code in spawn-venus-hydra-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a66e971fd14bdefb13ffa29893acb4ce63a7232109a3f4246fc26be70ddc6ca6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189085 Malicious code in rate-limiter-hyperion-pavo-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0e5bad268f6fe6033218f2c4a2400977013b473187c738072f81c51a8f61998 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185985 Malicious code in callisto-cors-ini-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ee2ae0957732c6cc0510feddf764b20bdbfeee3eb45f1f46839a45c4ac7e2c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187648 Malicious code in jwt-polaris-accretion-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e37b2693cb2d609541e5af2ae1c48dde95387af1a4eebbc1098447fc26eb9ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189637 Malicious code in sqlite-winston-scripts-uninstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0cff5f26dee0c022bd5ce46d719a6d2583faae3414309a1c04c5ff377c8dea5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188606 Malicious code in pegasus-scripts-antd-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 148f133e1fcaf9e6b0f51a92e0b77ef41f1bdf6ed12f5efd4ca90fe15c72a9b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190005 Malicious code in troposphere-elektra-supernova-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fafea2be1de7264163adeab8c2f4d88c984fdf472b377385bfec282df6b6a8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185711 Malicious code in axios-algol-wolf-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2bb86b8d75a55a4d1adf14075e237934bca6eea01c1554d121b3e15bda20ca7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187008 Malicious code in fomalhaut-venus-pavo-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 329c73a08e9f3032f6b513ae004fb488440b7b7fae9069985ce5d0cf7d9d76f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186093 Malicious code in chakra-ui-test-quark-astrophysics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f7da34d62a5c8298da9cb0398d30b6ec22a9f5f88682ffbbef975d1fdeff375 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185385 Malicious code in adonis-comet-sedna-geomorphology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 337bca060b6e0e2d205280cca27089440473dfbf815ca59cb70305a3995b1f2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189702 Malicious code in stub-emulate-decompress-view-sandbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3014404892613825d603f59e7f5acebc98b397d1e96068233852a6fa05f78311 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188430 Malicious code in oortcloud-chariklo-geoarchaeology-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38de53d077e2dd587b1f56e6e842cc552aedd22ddfb65fa903f1156de0681b48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186890 Malicious code in exec-proxima-ophiuchus-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b09158f6d460d1b85b22dc0e801b0489afa54a047d31b5575832b9be64e623a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186871 Malicious code in europa-polaris-terraforming-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff57b3d746be81aa8058b5f693a6d9942341db5f639aafa79ac47627b36a01ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189936 Malicious code in titan-despina-zenobia-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae5ee25ca20a09d9abb7fc1a6d770bb3c601cf9ddba8f4d1880abb62fee026fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...