MAL-2025-190071 Malicious code in unuk-tethys-blueshift-cosmicsilence (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eec7fa46d7b2224b9299e4e99da6d3ebad7df53a8c9f8733f62c56af88f2db80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190012 Malicious code in try-signal-lambda-execute-kernel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff58345af7f94838fe702630b47bf18db37968f47a7626a391421cf46ad542f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186286 Malicious code in configstore-mensa-airbnb-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aea25f0555eb5b71193a4d36b243a702294d61ebee8d3a9895e7fa6042639d07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190263 Malicious code in webdriver-manager-neptunology-oscillation-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c818da0d4724a5056bdb4220b90d6078bd9764e0642c6f267bb98ecdcc268fd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quark-iota-paleoclimatology-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9422f0c6552ae0207d6ba6344207d2fc27ffec34d9f8279ac7fb1407f5431839 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190043 Malicious code in umbriel-bootstrap-polaris-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c7e22f661b3b8aa6ba56ea19195787c22f7e2c718cb13c4698d74adefd90d00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185793 Malicious code in betelgeuse-gammarayburst-puppeteer-rehype (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5130958447a541346c610348c14c00f249776c21a7f1dcc342652db121fd6f92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nucleosynthesis-neptunology-spica-stratosphere (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eda83e4bc64b5fe5829462248eb9db1a8ad23495c0f75a0a84658b7ff95c8f99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in interferometry-paleoanthropology-innercore-seismology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5111570fb96c1ba759d258ad82f85016f3ea249aa5656e2e525ebc6cfa974bbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tau-psi-theta-process-optimize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d9342e487099f2f733a00877d9ff8e0ab8db3d0f66801c67047de7d9889cdb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apex-postgres-procyon-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c0aeb02932f948ac72d778e30dc2a45eb788602e06dd414d7abcb985fc34e8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190187 Malicious code in vortex-husky-sqlite-exobiology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90045f94e1d9d66252d467fa18357ac19aac151e5ea708173e4ac15adc8779ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188645 Malicious code in perturbation-thuban-neuromorphic-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2fa00f740ade73172c617afb80c51e53ffc4ec855be446bf8bdebf9b4ecc976 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ultra-library-remark-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26fdabd876905c82741cd96325f093bde824e42ec0b025da6126b2faf6a4420c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177668

Malicious code in neptune-cryovolcano-dysonswarm-scripts npm...

Malicious code in docusaurus-titan-betelgeuse-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8f779285f8402967a51b4a701f70d23e5043abce71d017845f6f5674fef4929 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186862 Malicious code in ethology-subduction-foundation-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 845f1cb6960a58c886de2924a1338800f1af16f5f973e47b7b8d751097e2b286 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189829 Malicious code in taurus-interferometry-global-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 423d2fb9cd944e08525cd67c996f1e7bc14d018867030474945cf79ccd4d9b79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aldebaran-halley-eris-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ea1ee1c5006e870f575cd778508830625614ac4f6ee77b64e52cd1cf8e291c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188222 Malicious code in neptune-lacerta-accretion-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d79e1ddb6667e6731c2582306c0b23f831c629dba94e4bc6165a1b0895384663 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...