MAL-2025-187948 Malicious code in materialize-stop-quasar-outercore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40c02f2b49861ae44e49dc7dbfbcee45f3efecf0ac13cc6817c5a72d030129eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in biohacking-release-it-augmentedreality-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28e8f051057f6ad408a29ec68c9629075445fc49c9abcf12e5c34962065fea0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189004 Malicious code in quantum-norma-canopus-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89cc616e1c86db519ac69507809139300362341a112b7750cd00848d92ec1602 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188460 Malicious code in ora-polaris-uranology-planckscale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c94ca100618990dee2927e23b7d9bc5d41e43bd37867540cbad3756c8b7b740a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grep-fire-throw-web-sed (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebf7689d3d15f023a0d962a1dc51e8ad684feb14bbc8cc9a82f6b8716822f137 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189385 Malicious code in scripts-duplex-innercore-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 795b605e61cc15d48e6db76692728e9b0cf00f022d125f102ddb7cde83246cb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185808 Malicious code in biogeochemistry-multiverse-xo-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8dc9b7f4c64531ed21eda56b6d6d2ca8e52be7d3f4f350c28f419073fa126f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189287 Malicious code in route-permission-grep-quick-debug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8522859c4db4d599c66d98d969c343dd68f5f7793b0ef4885860c6f1705ca7a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186980 Malicious code in final-scale-static-yaml-debug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6ba87a36ae06fd4997f24c35c4cf6157601dad069a9c57e6ae8d43cc88aa435 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189305 Malicious code in sadr-membrane-slides-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9f5afa3f0909d32cb9061af02d912fe9587dcc198b2456101683b37f285bbb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187312 Malicious code in heliophysics-blackhole-ganymede-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c754beabdfebaf0f6366763fde491cf5889feefdb7cf3b0a5c5d5bf89f812cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189102 Malicious code in redgiant-heliophysics-protoplanetarydisk-prettier-stylelint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d2d787ac5197bb2ccd0791295222d1fa188d9eb72d6140865139d4dcf028fd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187537 Malicious code in iota-geomorphology-rate-limiter-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 346e3847a3afae7b06fc9b4ad231de81c16e9d099a34651a5080fcd332454451 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190455 Malicious code in zenobia-rate-limiter-cosmos-csrf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63628192eabab4fceeb1ac6d15980c58c5e6ed660a4f133745da0209a59ffda5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188147 Malicious code in multiverse-pavo-dependencies-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5bb86e4fc7d6abeeb8acfe3062856a25e160c76e9ab903a8caa83445b6660ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186249 Malicious code in commitlint-config-angular-graphql-ursa-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd57c25c7dc8e5c5e65fec44158bf31a22298db16e48f9ab0afbce4c61fbb2da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189992 Malicious code in tree-function-kappa-decrypt-assert (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cacb380e1ce93ad7d45f252a5f9858b2a29a47775e53ec4c03d4779cadce49d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186854 Malicious code in eta-proxy-omicron-theta-sanitize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 236c542af2b6ed42542ff27935ed3593b1509125430b4348128a798de5c9fe1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189782 Malicious code in supervisor-slides-orbit-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89f9dbd94f494a24ef57e9ec19ecdf8c357feea71319d53b704f455240c03183 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187222 Malicious code in greatfilter-nova-morgan-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70a41bbd5a3eb7b2cf34d987772360f300333ee568f6821c4565123bbb63346d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...