MAL-2025-188476 Malicious code in orogeny-algol-kastra-xo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc1aac10d39afcc9729da4f5cba2dd67da57cefdd576456a620137c7bdc53f17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188605 Malicious code in pegasus-resolvers-leda-mechatronics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d7ee621db29267361daf2de5c6753f45be5ac273e82412dc7ce548125410862 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187783 Malicious code in library-update-commitizen-jabbah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97f9907c91e0e0fd8eb3295044a11a6a9a0d6513f2fc950b21059db2c7ec5b53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186790 Malicious code in epsilon-class-cluster-root-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 803cee7f39b9a2ab6058d1cd3ae867eab62842ca33d4e97cb5e92576816dc45e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186555 Malicious code in dependencies-galaxy-install-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5276469197c6221f8948ff69ebe656dae79f34980fb1e4e95a39c2df8634cb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190443 Malicious code in yonder-xerxes-xanthus-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccc40dbe9bcc12d0ac9abb79a3fb1a96f75e26103edb32a6aaaee1c4f3592572 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186269 Malicious code in concurrently-janus-equinox-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f6d6ef13b489bbc8b7a52e41f3e53262e31a84c11cdd68253db993d9a2fd26a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189856 Malicious code in telesto-publish-oberon-charon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de6837a499af3bd764db78016d59ed3b3b1fe3f57a03f81847910a466b622002 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190147 Malicious code in view-deploy-scale-promise-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96480d65642dc0564974939eafd6126129e7f8b4e9c3845b878bc9244ff62916 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185660 Malicious code in australis-wolf-archaeogenetics-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85e9c7ffada337800e2dff074449d3606589e5a334b33b5af5f2204a8943c767 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188552 Malicious code in parallax-chakra-ui-cybernetics-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dc8a5105d982a9f1cce71004505af3c846f385a2b34a35bd91283b0aaf5c9ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189918 Malicious code in thread-compile-parse-decrypt-air (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a7146ef933c1aa178443b1e6366208057596a2447d96deb31dc0f893f501187 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190402 Malicious code in xo-castor-frontend-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 075c29e54a9911238abd8798bbb7fef42b22c93a5a8aa1a39d9fa0bf36cc7c7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185571 Malicious code in array-stack-awk-emulate-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdbce20584aeefc07bff020dc5a37a22ea8e793ba0d39fe8c09d4da1bee7eb03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190234 Malicious code in wasat-photon-await-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9928a8be2e63151c5a44872a4540168eb5702dc997d95293ab99824e30466315 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189818 Malicious code in tau-import-float-monitor-finally (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79602db3e66087d3167afedf11b524ceb75c27b2b884c56b824281cc7995847f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190136 Malicious code in vega-xerxes-meissa-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b63abf6534ea99f2d7edbd9fec922e534d5a525a6f21b8ba75ad9525c2a485d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187632 Malicious code in juno-areology-dorado-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c5dc9081536cb40daf4c65e7faf0f892689726670e29ce501cc77d9bfb21158 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188516 Malicious code in paleoclimatology-paleoanthropology-supercluster-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 114299ae42480cd8cb10431aece2c344ccac5007ab717c6b1ce22ddd17a28a82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187525 Malicious code in io-quark-babel-centaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d4b40a9ef6ba2338b307f6019ef8cff798ca04f067fafe984721e61b3924902 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...