MAL-2025-190466 Malicious code in zephyr-local-hexo-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af8cbc43bd2e8f930b64bd3a7bef8e5d6d3354d3de596f4ba9862789de5ea934 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186200 Malicious code in cold-mock-daemon-hash-thread (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f437050931da1ccc18f821dfc28616294223dbf7bd3e3d7911b9d4d45878ac9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186854 Malicious code in eta-proxy-omicron-theta-sanitize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 236c542af2b6ed42542ff27935ed3593b1509125430b4348128a798de5c9fe1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186951 Malicious code in fermion-solis-wezen-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c64341b959ec7e33415d9299b117759d3127f0dc1de6b32f0137c1ad514a098 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186872 Malicious code in europa-umbriel-solis-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f42b793b411ddd6ace9dbdba0002043f41c0eacf007feed3172846fd3d00ecb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189176 Malicious code in remark-halley-terser-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca6dfb854cfd17d5b06c05f8223eeb22c789a6217a138f953d0edd5bc0997597 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187162 Malicious code in geodynamo-draco-cache-thermochronology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faf8bc17f4419109058b137dbb7f9cfea702b6352c942c830cee9294fde9f0f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189453 Malicious code in serialize-minify-decompress-mu-cron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1746b39844b7d17daa12b977f8d00dbc6391d85c4c41c6d6de6c58b2cbd8c66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190048 Malicious code in umbriel-paleoanthropology-aldebaran-areology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1e427da85bb0ae94d10d4ccfc297f458f821c17324d49a62fba408aa7756571 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185419 Malicious code in aldebaran-polaris-materialize-xenobiology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17cdab6672cb9c2ed6728b1014033a902987d96a9e4564b2ae56194180753ab8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190422 Malicious code in yaml-cache-sails-jwt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af495e448a44b27ba05a7124ae72a767dbc8c0ee4b614c3f1fe4155da6a49a1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188845 Malicious code in procyon-lacerta-wezen-geochemistry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e26ccccbebf40e22475b60ac38b6b4c904884e79c9c8149cc4ebdd18b7f3c58c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188014 Malicious code in meteor-bulma-augmentedreality-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69a98a414d2ee0424f8b9bf8fc79623e0b8b7fa9ff1c5249382548f140103353 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185502 Malicious code in apollo-ganymede-algol-impulse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6884123d01cc47416990accc41d7ee9a8c0181cfe461bf7c83149d09d680ff4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187482 Malicious code in innercore-alphard-eslint-config-xerxes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bb6fedb6eab21c1fb95291b854bc86128bbc9a7c3770dc6e09e72288e1eff15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185980 Malicious code in callback-typeorm-venus-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aec581ec2aaeb93e6d9e2f1e491d10bdd4f46293f433cc524700fd81c2395f56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187035 Malicious code in fornax-phoebe-jabbah-xo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89ab6a4c8a169e333e9defa80910133b4b619a071f3e744ce182a3d24ec5ef6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190182 Malicious code in void-oberon-supernova-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1662dd30a3bfdab50f06631023e83a010a07f87f264297ccff4a1f470029289c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189008 Malicious code in quantum-uglify-js-acamar-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45ca996a0f37fec8bbeb92598671e30801501dc4df71a3dbf77130fec73874c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188374 Malicious code in nuxtjs-ionosphere-parsec-cosmology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fc3f9da4423ef958a565eaf87c9128d968bf1ebf01edc912b405a408b76df87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...