MAL-2025-186960 Malicious code in fetch-ursa-vega-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0d636c0752eaa2b5ba9b87b8801329c119b834f1e4a4d5790878fed205c0a6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186882 Malicious code in eventhoriz-perseus-semantic-ui-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36c8dfc94f09b2035ce23b897ae3ff76adb7eb115168d013c0bbd9b08398fa8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188770 Malicious code in polaris-typeorm-carina-solarnebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cd39e7155d8520a5724569d8afb03405c8267596fb7bf5b3a99361f880220d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185989 Malicious code in callisto-hyperion-dactyl-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94f5fbb4310291c69ae8f62db97f4ea9145c9fcda4341d9b4daa0178186b0d4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189831 Malicious code in taurus-request-hyperion-subduction (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 805221cf5a62588c1c2a9e61e0875d0fc1e09945259c7a29162ba921752675b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190211 Malicious code in warn-bash-grep-array-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8bc328598631e616c53ed70b1dfd4a169e5b60020465e7e29511eb35b9d538a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190174 Malicious code in visualize-validate-array-hot-analyze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa5405559277835b28bc4c8bb6db51998aa22c4fd91d1ef31c819a28799cc347 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188985 Malicious code in puppeteer-tailwindcss-karma-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d9679267623f6c6b49f81c8f19e9f271e992336207668f965e6348a4c9bbf98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187164 Malicious code in geodynamo-radiant-slides-bioinformatics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 803477616d2db87dbf10021a7d12ebbb625a2f2e245778328bd791fbc371b248 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185854 Malicious code in blaze-transport-eridanus-singularitarianism (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 132336594566f83353e8d26153b7eaa947954f4e3280dca688c1d21777f60534 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187119 Malicious code in gatsby-await-palynology-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d70de77bf70ec7002d967b917e7a999162d78c5472219f6ee6d07e7dd73baa80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188821 Malicious code in primatology-technosignature-magnetosphere-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eeb9ab28fb0d25c1d31157674fadc3130df8137ade8adb06630447d3c3639e54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185549 Malicious code in arcturus-run-script-hydrogeology-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85308b7f547a69be0ec866ce936c922952149183b16feab778b8f5b68c64d58d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187387 Malicious code in hugo-plutology-comet-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efae6173e3dbad8733385d1fb7c202c31c5a07b0f351bc94b93fb683565134e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188472 Malicious code in orchestrate-benchmark-spy-air-cat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56af31331b9ffa6f4682de3912e008b7d3a51a1271eed1dcaea6e041c7d9c7d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187374 Malicious code in html-webpack-plugin-hologram-stream-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07f786614246d2d9d6432c8d36c1015a7c75b9a2b3c99baa78f244a48ad6eb9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188616 Malicious code in perseus-ablation-elara-cryptography (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc46309237019f72cd49c94414276dcd3a6baa3c26c9218166b198c5ec16b9e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188910 Malicious code in proxima-dagda-tethys-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ea648e943b2437d64d35c4b74d17399f38b90f0f2dfd6e329fc14d4bd66bfd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185426 Malicious code in algol-aldebaran-cressida-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3b60a5310d40da64667cf3c540ac5e0f72654d8b7b2fd03a830545547d126ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189884 Malicious code in test-meissa-stream-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e201ad4797f6c1d0adc706095b06d260333b5a1677e61717564549f492ee379a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...