MAL-2025-187225 Malicious code in greatfilter-venus-stream-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2688ecd07f82607da45c4ce63b5e64aab9f8a5cd170454bb2ba16f0dbd1b5a8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185934 Malicious code in bulma-promise-redgiant-xenobiology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea908eb89c40ecb98f25cb7fbe7bdb9575dbd9175140d9fba6315a9ce87d4814 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186586 Malicious code in dione-dorado-apollo-mongodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dcbc7931eef29ac5c5af7ba06802424115895cf2f3b63f7ae23d400ffbdde7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189360 Malicious code in saturnology-darkenergy-sadr-paleobotany (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab539e896af1b7f48ea627c96b9ffd7a622b3e04fd2e1e71d82e26080d7deadb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187327 Malicious code in helmet-release-it-enceladus-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac31376fc97d374897aa40e11086913141414c12cb08ebf5b53dd7f29a6780fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186600 Malicious code in docusaurus-xml-proxima-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4841cb7fbba4912212b6867a9ab9667021ec18b4781ff0fe00923b7377062a5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188857 Malicious code in promise-dynamo-umbriel-jwt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0d543e13fe999cb16955764ff46cf6d13d18edad98b0defeebf8132fad2a279 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189820 Malicious code in tau-mu-good-beta-kappa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ffc911728d84781a700b5b9e706f5e42e1d50b3a29e8c8141b254da2aa124f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186435 Malicious code in cybernetics-concurrently-testcafe-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b8f5792ee6c85cf91f477bdf5b37dca196fccc1875897cb6bdc09b40cb3c6d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185769 Malicious code in bellatrix-mira-europa-commitlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cab7ef498b6c313eb54c4a5697005ba951837a2e208cffa2b5687efad2360c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188933 Malicious code in public-auth-hermes-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6acc8648d18302379a6ad78064207515f06962fd2044c6a0312ffef45670b15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189763 Malicious code in supernova-dysonswarm-arcturus-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb56d71359f955d83f68c2050ffd9f7e52a84eaca18c226afd9b2e5225844e19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185399 Malicious code in aether-vuepress-gatsby-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41993d444e8edf7b999acdd8ece110ec2910e10679e4e34882c0006f8eb8defb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187455 Malicious code in index-wind-info-emulate-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2c7bc730d75017275a5990844599417b63dfb9b803b4e2864818d175504e0b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188222 Malicious code in neptune-lacerta-accretion-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d79e1ddb6667e6731c2582306c0b23f831c629dba94e4bc6165a1b0895384663 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188972 Malicious code in pulsar-mocha-saturnology-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e9af36bde91252a42ee3406851e9f22162b169e8cd83b2d46b3e2ab72d99eba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188174 Malicious code in native-blackhole-parcel-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a471cc517289478a545c2d4f578f4a0270138b69edff1c911bc1f622c60c9c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185699 Malicious code in await-rate-limiter-ophiuchus-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1583797f17b8931350761f69b3d6a8224213ed0a89d3bfece1cf00b321283672 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188880 Malicious code in prosthetics-local-canopus-uranology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3efdeea658b4d30cc033636cd337b88a3295df0119643f737b4b8fed468c07b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185925 Malicious code in build-eleventy-deneb-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e60f9254d7e112b0cafa3f70a3f75b052568cb6aba5c5b36c30ab0558c2b06b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...