MAL-2025-185536 Malicious code in archaeometry-eventhoriz-taphonomy-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60c3be56c95cdb3180faf1ff5f1f7ac9b1287134bb4a918d5d585bbae225d4bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188190 Malicious code in nconf-gemini-webdriver-mocha-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7e8722c814d02682ad652c04b378d4dc3c4eb3d425cc1f427ccd04011bbea9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187410 Malicious code in hyperion-heka-promise-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50eed8421b312d177df2e30c8a1f41728b0d0ac4647908b74f9732d47c0c082f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190312 Malicious code in wezen-hexo-update-lithosphere (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29b835942f6a8543c810550c04c687136135ae9e3c47b61eb95bd234b7c13caa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188075 Malicious code in miranda-koa-fetch-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0542faa9fd01fa72c958cf46a1d5a08f0ba4db727709a088052187230321c063 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188291 Malicious code in nightwatch-ophiuchus-request-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 894e22879845ad696f15e64f90cbac43dcd710f450574a8380386811c09f27d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187307 Malicious code in heka-neptune-nightwatch-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d84dc40b71697f2fdd325952b027c262ffc610bc4981dd870c48b15e3491471e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189319 Malicious code in sagitta-publish-wasat-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cb333963f806358968a273c2116974e640b3616d2d94f90aa813485152c384f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186129 Malicious code in chariklo-perseus-chalk-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5338c7a76846e68332ded14ff77f20bddae227a163e5be26d6aa6cf4ef5eb266 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189497 Malicious code in signal-throw-pi-sun-sigma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e40c2a16112d2cd840182125f10235ca77233b407e2bf856c543f547bbbec0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188416 Malicious code in omicron-bundle-file-final-warn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6cd56b17c0b82597e1e036cd7fb05112f6c2cf312bf53a0bcad543dfd985bc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187077 Malicious code in futurology-quantum-mysql-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c6a031d73955fc96cbf2c1abde2b595b5a638ce451b56051a15dcee2c81b161 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187350 Malicious code in hexo-boson-charon-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a56cd66ea725cf1761fe3250a133dfda961733f0870f716905609eae11f5f91d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186487 Malicious code in darkmatter-gravitationalwave-less-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60169f4539ca2dfd27fe10bf32020236f1d4b0106bec0644fa577812e0362eca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188683 Malicious code in phoenix-eleventy-io-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ba874897fdcaf548e9b7fbdb00270ec5ea6feb9cb237f6dcb0946a480910f6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188836 Malicious code in process-outercore-nestjs-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3840693770ce011f9ab6df4a9849100f172d84317ed427c44211f6467e80fbcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189986 Malicious code in transport-registry-slidev-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2660007516964d3692e02aabbe87172c23d0b68035f75d6dfe2d597e17f4948a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190357 Malicious code in xanthus-got-telesto-accretion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bbac9defc7fbf4c08b122aec88f87e0ce104ee49d981074fef3a67e0b98cef9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189204 Malicious code in resolvers-superflare-chalk-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3250e8c09895d4ddc264575292a76402b578ae6c4695e8628f61bee0932024b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189809 Malicious code in tardigrade-indus-baryon-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75f2514afda20ff1f907f552513fb989fb4e0bcb04cdc483a5a11c2b968e60bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...