MAL-2025-186596 Malicious code in docusaurus-mdx-ionosphere-fermiparadox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26631d15ade64fb563253b7b5ed0e60a649adbece8aa582a4b8871615e46b3fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185840 Malicious code in biotechnology-halley-redgiant-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be587c196677b01b0966672ec9c47b63943494c056f4e7e118ca6ae67eeaa0b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thread-link-code-stack-old (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0332ea06ac8e14a11d6373d745a8c9acfba7cf0627fbf54277743d4d2dcd8414 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in native-galaxy-antares-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11b8bcfdfe7849b90d3c380667f517122a332cc8b4bb07a54ce638d98f18e1f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cypress-geckodriver-vulcan-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a8e7b3c4e75f8542f11b8a92dfb8c43d2878628b0adecc1a5af688a49451c60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188142 Malicious code in mui-norma-callisto-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e50dd2b2d8d78ce8e36999c312857463758a39ad904e094dc54163e473bf5c54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186627 Malicious code in dotenv-safe-vortex-meissa-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90fb944cc269795d653356deba7764bb80e34801218d14654f3434c39296c5c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pino-remark-string-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b520b204c8e7e77fc6e865fa0a5e72c01b32ad12f2d2d9390bd494ecaf08551 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186348 Malicious code in cosmochemistry-lynx-ceres-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74ab9a101e57e01b17e4c0f19e62265f783a7a29c6f149b9b13a5069caff247f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spy-visualize-array-spy-index (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2812062483e1378c0cbd25c79bf5e7f3a8fc913a22ed9b7b8386e6e41e3d9563 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in singularitarianism-europa-spectroscopy-lithosphere (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbcf21e8228fd9e543c8d29d6cec97227cb7d7ec7a78be07db67bbd5b7d813a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188318 Malicious code in node-sass-kastra-bellatrix-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98ed5621e5b26e16d55057f9b96d4cd29d973f3f25f1595f1a1a04ea47c9c0ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dendrochronology-graphql-betelgeuse-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c12230401a2890b637b05550d901e8bcf53d8e9b4dd1151598bc395c866b8e7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arcturus-iota-auth-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 344a134db153287fc48bcaa7911fb098e3e8419e1acff1237db92b1b6b1c68f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in registry-quark-barnard-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8be35985da5091690aa56f84416af345aa641a6b98c78446a0a03f371a4176d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in procyon-planckscale-steganography-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39c4d37fbf13255886e12089e56f22b61d91b3bdf0777757e8525a23c2d66b5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in atlas-miranda-jabbah-oberon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f020f94c5fdb02b7fc5f82277e35e39660c2c8769968ee2d2469e3286f8e237 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186099 Malicious code in chalk-paleoclimatology-dependencies-parsec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a603788e55451e61a0dc7013d27051b497a7a2c3d8bf05f6086ffe0db7090038 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185796 Malicious code in betelgeuse-octans-aether-less (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 238d025dab0ee39d02e7edfb16a051b43ebfac7d807344917f615cdf00cc72ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189281 Malicious code in root-resolve-wind-stub-interface (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76745c37e2effb609da0372dbe196b1268ae5777b04442b99e59f3da1c499739 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...