MAL-2025-187042 Malicious code in foundation-transport-xenobiology-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21f58e44a960c10e222f1a01f7545b9fd1ea02dd1bb91d718b511e3e182eeb71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189589 Malicious code in solis-perseus-bootstrap-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66b8d59746c8916f2d0e0aa816776331f332804015a10f708950338801106be5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187977 Malicious code in membrane-genomics-passport-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95241f9307b7f8fe74ca59b24e693dfe55cefd7a067a458723a3ae43b1aef6c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187445 Malicious code in impulse-holography-grunt-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9c28c8183009a08a11188523afcf95bf4a90b317d6e72e29db3fb3800beef2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188592 Malicious code in pegasus-cache-passport-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dfec8b52297551b8c72f8706ea4a3412254e3aef5804f3ecfcd835d4237b6bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188792 Malicious code in postgres-proteomics-markdown-abiogenesis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6860516dce9a9d7e0ede3eb6cdc0557443c2c6fd995d1d86b1226558ffedea50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185640 Malicious code in atlas-repository-nova-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84fc45a419be4c1ce2710de99244938901158da76b1ac1d2918bbfe8148ef905 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185585 Malicious code in astro-helios-nightwatch-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c597e6e94b0dc9824b4353d492fad15b37f4cfe800812bcf2c4174a1e8e63b3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slides-convict-husky-kaus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b69738a724e0092e0205d6285478e0784c458bdc90564307ce801699beb7d7fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187510 Malicious code in interface-stack-mock-execute-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc20e53d07d6acddd739f4e433e4d8a4bb9b9679bbf5027a87b77495cb36177b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185688 Malicious code in avior-quasar-comet-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f81365f9fc5c2f91505f735b8c2f870358d8ccb4640b6b9d0b2904e54506807e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190102 Malicious code in uranology-version-flare-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7590dbda8cfb7c763afc803e54f5eb4d59a9c4a1274d0a54bfd219c15fdcc6f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in restart-jabbah-module-quantum-computing (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 754f89bb05d71cb06dabc0ad38d390187aa8c02187779be6e45282fc31257f37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in equinox-eclipse-redis-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 737b52923e7c20691849abf236ed8ede5df6d7c8cd481e3c7e17dca303bc74dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in achernar-ursa-server-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0d7856e46345ac0a8d4e9a71a876092fdd5bbd9080d350dfe107e611ac8b883 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in export-hot-cold-orchestrate-awk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e29679a768cff74bff87249c600a87ea07ac325f73af6665e836040a9722c178 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webpack-quantum-babel-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 980725b9c25bfa17ccd89e3880bb009f8c98c783a0dd7bd6e66cae551e1ae5bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186856 Malicious code in eta-refactor-execute-float-load (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 125c0784edb26ed9465dc8f0823e5ba03e9837a8cdc6f261ca03fecc79fa65c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in forever-heka-polaris-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 549cbeccda483381d702c303bbb17493a0b42b4983911a75c13b972b2178d872 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cloud-star-parse-fork-sandbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8952f1c640e356dec0fbec116b2f433817d877347505c728b5161b584a49ef99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...