MAL-2025-187969 Malicious code in meissa-gemini-jupiter-heliophysics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 089faaaac3c0796dcadd5706ba9d72fecc451884fd1cf61f39081991d2cb04c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187084 Malicious code in gacrux-magellan-cluster-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f8027ca7b26fabf039bb2e1967abc63917cc89e3b61e4199161637cf28297e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187156 Malicious code in geoarchaeology-sagitta-chalk-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46bc927471dab8293245039be0832db1245124759c8766ad7d47fa4e60f26052 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187422 Malicious code in ichnology-ursa-petrology-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a6f4fcb17fd416bbfa643799f40a797e324953f86944507dce411cb5d4eaf44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189864 Malicious code in terser-antares-markdownlint-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a63d74fa8c6808e660d5a31301107399d05e75ae04fa9ca5c2fc86eb0c04f105 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186975 Malicious code in file-decompress-gamma-wind-object (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c18eb3d3f0daa811ce492b9531635f4cef64f89da0a246e6005ed0a1dca836ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188460 Malicious code in ora-polaris-uranology-planckscale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c94ca100618990dee2927e23b7d9bc5d41e43bd37867540cbad3756c8b7b740a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187041 Malicious code in foundation-rigel-pm2-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 775fd4bd5df4bff7878c3a9a5430e41c9a9cb298d7725b017a3cae2bbc74e668 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188324 Malicious code in nodejs-cosmicweb-chakra-ui-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93a5092226cfdaec9107ff680820108c965f38859cd60ac2915fa0552cf83dbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186820 Malicious code in eris-sync-loglevel-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eceef989feeada3339ec402d1445f185a3b004a1f1c1c4a71553971739a38d8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190040 Malicious code in umbra-mensa-bunyan-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7cd34942a4dfac6c4497a53e8b881b509a19d9a829afbb5b395e04cb5424ac8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189642 Malicious code in standard-altair-izar-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7aa4728fd5bccd6fec6ad0f4459479b41c02571c837732ad3e92688a04eb9bf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187596 Malicious code in javascript-async-enceladus-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f58b94629566eff1ac38fba20744f5df271c6b581808cbb219078e2f02e88fd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186712 Malicious code in element-ui-commitlint-convict-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2449140152499149dd95c33f0f0d29f117d403a9f79b762502ec4458506a0938 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190277 Malicious code in webdriverio-europa-perseus-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4635d00f0f29dd9b3d32c9a6526c9257c08c69a9bcc4c3d92f292ae61fc175fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188166 Malicious code in nanotechnology-ariel-atlas-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 726ac8d50d2a6fb517f785829fa5c9a3f25bd010388eeaa6547b9f90cdc68a42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186925 Malicious code in export-zero-orchestrate-zero-compile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5af09b797e4f7aae7c05dba3d89244c143d4393bfb4489b7d6453160dc763868 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186962 Malicious code in figures-betelgeuse-ethology-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 502ea4d5d596187fc863e0bd4b1f9a667de36b53b2af2edc798a666929b4924e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185976 Malicious code in callback-jekyll-public-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e37871c5d8d32001ecc33cfcef2b8297490b122f158b68496524289819179f33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190046 Malicious code in umbriel-kastra-gacrux-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ffda8e7d30b433120052954bc506ed481cdcf30599bf0120496c17a88789f72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...