MAL-2025-188438 Malicious code in ophiuchus-corvus-stream-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16eb5f6ea3c98ed2113faa6d618db3d3201573c3bae9a0c14b1e25dda0cdc95e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188852 Malicious code in promise-algol-cosmicsilence-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61401dd027e8d1fca9c02b35b4293c1cd561b78ddd98e7088a45ed40565dc0b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188542 Malicious code in palynology-semantic-release-pulsar-wormhole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34206c99211389792c4d934032f76e4292094dac40215fc8bc1353575dcefef7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190131 Malicious code in vega-cypress-miranda-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43dd448ae4158d3d2faceada3991d666141cdc96317313f34e86b4d6773a6daa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188972 Malicious code in pulsar-mocha-saturnology-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e9af36bde91252a42ee3406851e9f22162b169e8cd83b2d46b3e2ab72d99eba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186395 Malicious code in cryonics-magellan-bionics-tardigrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f35509feb00c10d70419411c894a45931a339c14f56fd0b061b3718d5ae85a12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187947 Malicious code in materialize-repository-dione-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b82c43f714b10f67dce4baed55a1a1ee8189351c594660d8c8ccd7e9f6990d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189982 Malicious code in transport-babel-dagda-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76e1c06bb58ec7b568f529051bd863c23ffa6e9ca7544112284c9f889effd370 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188930 Malicious code in psi-monitor-old-hot-dog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06252f89b5ee1e7f2068a36a6609079029edd2ce863bc78470237c11e290d5ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187087 Malicious code in galaxy-blueshift-astrometry-quantumfoam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11c73a4c693491673fc8c94de7e4e6149530af1635a4e9230317c4fbb26d2a08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187161 Malicious code in geodynamo-callback-less-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45c4458ad3238e5de7a67c222d870ebe2709d938149bc1b8763330abcf4a23e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187971 Malicious code in meissa-markdown-iota-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbfac5256294b4858c1b93f7aa1f371d7a3507cae5cee54e35fa90d09c910e7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190106 Malicious code in ursa-eslint-gemini-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1630e5264385a9c74585ac7083a4b36aafec62504d3d7b3b68157e82eb2a04b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187347 Malicious code in hermes-venus-cosmos-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5f0ead71ec8f697105cbfd97c82d6210be7471ec2fef6679e08c1f6e42863ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188624 Malicious code in perseus-geoarchaeology-husky-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bf0b6bfce5b812d86511042ff2d479088f8af8dd44c9845d780bf4d110c0a8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185658 Malicious code in australis-geomorphology-adonis-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bc6492d44c87fdb81d4918be79a52ba4d8ee13d391912cb34aaa21f5470ae4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185712 Malicious code in axios-astro-html-webpack-plugin-algol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 254ab7bbc92a7c4b8dfad0eecc86af73b9b16e8d10411f1b91d9dac65b41f1d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185622 Malicious code in async-iota-pavo-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c1b1f4251a47dc183f09a26f155bd0931ec87d8606fb9177ab5ad1f58112403 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188729 Malicious code in planckscale-augmentedreality-relay-planckscale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5f998a78e0845bead33d6caedda7cd51aea9b95c228d8eccca9940a5fbfef87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187892 Malicious code in lyra-nebula-node-config-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71da1d08ee103264b969b081db8fc81219689df4fcc9605329c81bbdd888fe5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...