MAL-2025-185366 Malicious code in abstract-hash-key-report-load (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af67a09c9ac8b1f5a97cb010cec5f8683ef9b54771520fa4630f0ba372d1ba86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190401 Malicious code in xml-sigma-meta-daemon-delta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9814f634f331ea15ee456dadfc2e7f1468d32fd0e4eb9ef64568b3b1466cec6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-subscription-quito-uranology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5366b5b7b684a3e273fd85e0ab2aaaf8b1272bc3ab21fb5c112c75452dccd5a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inflation-apollo-rocket-higgs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 395b1247c5e72e553ae03620ece5fc27af309bb24287205d0b5f511c0c7a50f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188590 Malicious code in pavo-paleoecology-pavo-kaus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d90238c3f7cfcbff6bd504601fc2e280cf775606bc574ab0e9207f9ae50ef25e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187595 Malicious code in java-theta-theta-zero-static (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de583b65b57ab9087f465b92bd3ee216f6f2f543c1cddc1d8ae174441f641f89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186212 Malicious code in comet-auth-html-webpack-plugin-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f5b037c3a10e0eb5d63054a411dd6a2daeb791121c669593b5602687a52454b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188598 Malicious code in pegasus-mui-dactyl-terser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a0679388624378e5407482bc78a5f6cf2643b9db492ccb69df51e7e6c4a27ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186352 Malicious code in cosmogenic-polaris-helios-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3e6d3451b4d5f0da4f77046ec49acbcbb8bd9dd42f04cc2a46ade4250da3b72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187015 Malicious code in forever-webpack-whitedwarf-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f85ce66b9434c76d765850c0f87b8bb5f6a0e8866475ac5d2789354a914601c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in markdown-multiverse-vuepress-geoarchaeology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc4389cbd599d8b51ef8b9f455d0dff2181aa051854625dd0c231e3d4c364cb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189158 Malicious code in relay-tardigrade-typeorm-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68e65873a2865720e808f1d146398547f6af6787ab402144f49958f3ae3b6e90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188972 Malicious code in pulsar-mocha-saturnology-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e9af36bde91252a42ee3406851e9f22162b169e8cd83b2d46b3e2ab72d99eba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185433 Malicious code in alpha-integer-pi-assert-export (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a34951bfb26b2bf73403b5a41d1b38d6088c5a6558b84230cd7bb1e901125fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188675 Malicious code in phoebe-react-bootstrap-heliophysics-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68274b408b6fb2382a5f5a2aa275eed20c2fe6bf4f3a8f6a33645d810c97545f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in run-script-sagitta-pulsar-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 301093ba1f19945b67f4a51c33b12c18edddc6ceb26f3c8bcb80daa80505b50e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187602 Malicious code in jekyll-less-npm-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dbfe23271c900f951f36875d53f77f39ffe4fd6d1d97cb14618347003c907cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in morgan-sass-loader-release-it-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c153eb6fd6cc614dab9d8fd43c3d5a0e5258e9ae6ddd573ad103e2a78cdf4f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186299 Malicious code in convict-spawn-gravitationalwave-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 128d86882e0076d80ab9827d708aa6534aa225eee0e3afeb4af5dcf612c62f79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186984 Malicious code in finally-notify-table-orchestrate-sigma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3d4ecfd3ec9e536b6f5c276f6a533ced1d24590a4a00d5d059c241e6c2fd05e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...