MAL-2025-186702 Malicious code in electron-nconf-callisto-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc90748ea64a281a778df79da5f5d78d8439ba2ac5dd54761b15734e56d7aac7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189361 Malicious code in saturnology-enceladus-jest-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c71ddba711570c0f93b560b77dc589e118eafa0301b4b1d647ba6cc1e251c4a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185613 Malicious code in async-command-farout-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0253e71a4c0ddba50faf95c0847a068798e928497068a0ce75230dae1f5950a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185861 Malicious code in blueshift-canopus-leda-higgs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acab6813500f1c597e99e272e6a1c42d0a8644848cf3655935402a4123ebc4a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190035 Malicious code in umbra-australis-dotenv-safe-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8bed70457fc263e8d44f6273717090c9025bbc2a70a05504db3aa29de42573e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186156 Malicious code in cladistics-markdown-pdf-helmet-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd738c7aa03702231879b831a4173493a9c29b30350ed0f630d5bbd30def03bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187799 Malicious code in link-uglify-js-fermiparadox-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b06dca166a8b4d24c9ce17bffd59e25dd73bad52a682aa28c3d281a6d192b7b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188851 Malicious code in procyon-yaml-figures-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f7740a3ced9536b2d669360d3d0007870b01aeebbcd11690bd66779cdad44da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186970 Malicious code in figures-proxima-sedna-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92d0b9329c538d56e5c03a9784fb71627128b7a5d0af3687c492dcdac386fa18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187425 Malicious code in ignite-configstore-morgan-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8906d0c8e8c3c3b8deed98d2a4f08dad36cbf617d92d432626f92cb068681443 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187957 Malicious code in mechatronics-arcturus-puppeteer-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e1eaa9f69cc53c02498bf1eed85f24aed05f14f42b3aebd1070fcefaea74066 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188041 Malicious code in middleware-lyra-transport-innercore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36c93d490d0bba59501876c167edcb001f884d4363618c1519043c2ff159a342 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189995 Malicious code in tree-psi-air-moon-air (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83074f704eb4e4519a481ac7f001147d60931915820fa8b068b512c76f180ed4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189114 Malicious code in redshift-nebula-cz-conventional-changelog-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf33e7a660e7f12a243bf4ae70b1401a0f4b66ec86a8c2aa5e877f46d3750826 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185481 Malicious code in antimatter-celeste-meissa-cryptography (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d037036ebf23d884cfa774f83f05be5e6f54db51f57b71abb7497b085259edab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185843 Malicious code in blackhole-jupiter-spectron-webdriver-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1990d42487cdd6a4de6dd5f0cdff5a1a1751c2f65f643b9dc21407c36ed0ee3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186499 Malicious code in decode-authenticate-final-delta-enum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c5332fae3d3f2e74383dc62999e6522bb2c951f669ec62dc5b8e5cffecba079 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185473 Malicious code in antares-procyon-xenon-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7abddecc25f1220eeceabb1fe7418b88ec3fc540c529cd4130cf53050d96271a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188005 Malicious code in metalsmith-antares-barnard-yildun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 450389a4510dcbb902b1868e1dfe320565f58b8703cf3b2c809d5d1dce57c4e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186933 Malicious code in extremophile-geochemistry-dendrochronology-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bea310cfefb66f08a96c3188538369447bd04612535e404ae87469b672b6668c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...