MAL-2025-189388 Malicious code in scripts-jabbah-apollo-phenomic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b5ee5da379e5c309f399f54e4cabd154042bb01dbcf1183ea02d2fd6c98bb71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187193 Malicious code in good-serialize-protected-tau-fast (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d96e8ca90f6efdce57d44d772017ed7d940eb888854d1044f6330ce7ec439930 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187992 Malicious code in mesosphere-nanotechnology-got-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c51ddaebeed905bd3e4d2efb4932a9094e6dada95ad1d5541fb3cc456209d2d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189824 Malicious code in taurus-configstore-delphinus-nightmare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bb641a5bd2c178e2edebd041165405025d149fbff5933904010bfd420071e94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189640 Malicious code in stack-compress-nu-zeta-mock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 175e67631711d41d02520521df6190627ee39430a578d67183c97e9628a7568b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187341 Malicious code in hermes-browserify-alphard-greatfilter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e30708db9226924c56d46254043ab17828ef65f1ed22ce45bc6353202adddb3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186114 Malicious code in changelog-polaris-dotenv-safe-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c814b7fc8dab99055234c78d4948e54d8ffe37e73c7373184c2033064d60c451 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188537 Malicious code in paleontology-sedna-enif-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5223c733e49b5580cabd03e1467ed68395961b95f4b6b336840f56f367bf98df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190132 Malicious code in vega-eclipse-paleoclimatology-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e08a1aff2176c66f563e527058bb5b24409ae3fba13d78bb63d0c8d68d2a826f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185361 Malicious code in ablation-entanglement-got-epigenetics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8c9524739c912fc11604d6c93045b1cb8aa898c7abe96b855fe424639842b8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190424 Malicious code in yaml-entanglement-radiant-geodynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1da11391afb2e291ea7a2a769eebd51fbbcd6def6acea5a2870be0adf561196f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186381 Malicious code in cross-env-dorado-eslint-config-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0985a4ef455f65277df5cbe81f64d7157822a1f417ec13d808b81967e4ce8e28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186189 Malicious code in cluster-volcanology-eslint-plugin-singularity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09a823292dfa1cb7048c8d436418ff0a75354f1851e8773851776ba8f6a0c2eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187051 Malicious code in frontend-inquirer-webdriverio-cryonics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d0dd62122f5b3f2d321a63dcc3ac7bcf4acee18824dd55660f527f1e1e8a641 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187934 Malicious code in markdown-pdf-mdx-build-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed5368d721e6688cca2df4ecc49dce2acefe3054c59f7825db20785e9cf725a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189750 Malicious code in supercluster-neptune-juno-quantum-computing (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7543532318ae7b6ac85841586a5d5d482e3cd78901b800e164aa8ddfe9c3493 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185485 Malicious code in apex-antares-polaris-cosmology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37d14b374c2e4ed828cb310ce2dc54b05a5bd88eed2f4f3a9b85637b71310abf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188033 Malicious code in meteor-spectron-webdriver-ignite-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7825fb698098acfc9237bd9d71a9037ffc59b30a8a2d44a9f74468e7506bfceb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185582 Malicious code in asthenosphere-dotenv-darkmatter-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c69657448b3b6a02182e970bfbecadf73fe036e1a80d496d9efe2ead57291f4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185693 Malicious code in await-float-optimize-route-omicron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8e098a6f9822425661851047a431e132cc1cb8d102b241a0dd8972f13b4bd22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...