MAL-2025-187215 Malicious code in gravity-cosmology-lightyear-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0821bef28486dae7727261c5a952106286fcb1f54501b2f0569591e12d76461 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in update-meteor-jupiter-kaus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a6356d84e2bdfa2e9952503f7bfa22d9940fbccd3d5d7e5296766420d0ce81b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188803 Malicious code in prettier-plugin-markdown-joviology-style-loader-zooarchaeology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 233ad9fd46dd0a7e882c1bfcb9e7285a3b2061a17d83c3b4f4741b2d6cb699bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185447 Malicious code in altair-genomics-firebase-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d94b29e9713ad4d380989b0c0e6cdac4a84cf8357cd6849a4b7ebd32e68c9b50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lint-loop-playwright-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a242525b6943fcf77698c5a6cc5a7f8ac4ce45fb053ebad712afff73b5e0a81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in robotics-callback-vulcan-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c4877fa38bb9e318c05f63abab9583e9c00f31fc4280a326bd4fa640fa7272f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188658 Malicious code in phenomic-prettier-stylelint-development-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98e01e9e7bd3ca58db60522d781d1eb1d5bbd8fc4776327cf8da1a38e112b2cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188092 Malicious code in mock-parse-earth-export-hot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f34794b0828e1a200e5572cca5b219a30310bc6f4495e2634c3ddd92840c50ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187478 Malicious code in init-parcel-run-script-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 258bb21c3a3de866aaa23cbb8d387c7def0f1812acd17a8cd69e306b229a92b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189959 Malicious code in tool-wavefunction-ultra-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6440db217bbb9f167b1f6b7b229fe260c8138b56561aaeb8a50a4cfe2d6b38b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187569 Malicious code in janus-dagda-query-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afb85b42a5c537dcd9141514d6280fb515d53ef44c3e7801ea47c15aa7a3fa71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bunyan-areology-glaciology-charon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cfc2392c12292c74ee9da395bbd7057c863a1871c93f00572733f8d5995f513 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186729 Malicious code in enceladus-bionics-pulsar-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc471c541f583382db9548197fe8485291f4471086b4171d2f4b733bbb4f60aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in load-abstract-final-static-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b89b8ec8cc2029f323602737983cd24b79fa01ca5928af6beadf253afb737938 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in io-quark-babel-centaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d4b40a9ef6ba2338b307f6019ef8cff798ca04f067fafe984721e61b3924902 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188752 Malicious code in plutology-fusion-interstellarmedium-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f35960a2e783fd708a06c72b6b350050e03cc9c26a05631b4ac3c5ded4e9e70c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ophiuchus-corvus-stream-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16eb5f6ea3c98ed2113faa6d618db3d3201573c3bae9a0c14b1e25dda0cdc95e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in semantic-ui-redis-dendrochronology-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8d86fe46479392a59ae1b6014000b1675286c6ae85a50c9f04470b1d5626df6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186931 Malicious code in express-terraforming-nucleosynthesis-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d58c13e8ab6630647d9a08c3b65040effac140f3a388762a6acd5eee532a1a66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sublimation-sadr-magellan-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 430f76d8e92d8268cdbaddbb529572984b353efa027adb0b91de89e552597f57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...