MAL-2025-185601 Malicious code in astroinformatics-ethology-venus-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 226e9d3d2ba28c131f256e2a26ec85fb9afec9418f57e00d7ec0b300e0e98206 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187897 Malicious code in magellan-augmentedreality-webdriver-mocha-blitz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab10f2e6996aaa64585be8f1ccc8604e6d29c1836aa5cf29ec696ee0e297c364 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elara-jovian-dorado-biogeochemistry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffc0a55b1c53c1fd2c1886e27d908c9c4f143b5f167960e36e22de36e35aeb7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in omicron-bundle-file-final-warn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6cd56b17c0b82597e1e036cd7fb05112f6c2cf312bf53a0bcad543dfd985bc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in string-avior-heliophysics-tachyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f7ef6f68451c5fa51ac41295643a67cb2a6c0437ba9c76305c143de6da7c1d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightwatch-javascript-kastra-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1502cb2d438c26158c0aa98f86013e06d8d4438e066e035cc159953501e1719 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187148 Malicious code in genomics-paleoclimatology-aldebaran-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61d8b559320156005e619cb24f4a11bb7c6a51f20a8391b8536b8564c568899f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188385 Malicious code in object-rain-fast-process-unix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5190458cbba4889fb7152b962f72a7d7ff51afd404bf7aa70ed5cca78937b238 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186222 Malicious code in comet-private-crust-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 725732624ff25cbca460975f0017c52a1def485c39e5583dd9ba8475f3f98fea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187930 Malicious code in markdown-pdf-auth-neptune-optimize-css-assets-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edeeb03d25b128fd84b87b2e7eb8c732469db592c485a2eadbb54f27cb71452b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190448 Malicious code in zenith-registry-materialize-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21e56cf6f9d386fc0387e7eb45edbcbcbfbc0d7739f3829b7448f383ad832400 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185838 Malicious code in biotechnology-draco-webpack-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37351f9d161bded8244999f286d5a8e7b5a01f0fcdf5440fb810ebbaf8eaaf8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185487 Malicious code in apex-aurora-xml-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd7d0a68560ea990b728310621a54435d29f21a74d08f8126b4956b41fc0234e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189766 Malicious code in supernova-hyperion-tailwindcss-optimize-css-assets-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f2ef4131d23bf5c2293362acd0d6a0d7dbe8c4af28eb05c78cebe4affa6570c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187686 Malicious code in key-static-authorize-authenticate-quick (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a361e5c13ed17dc3b23fef4d9066f074e538e8eb981592f1c742c994e18d15f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188661 Malicious code in phenomic-terser-markdown-archaeogenetics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e13a9d7b5e5952c9e0e3739c59d67083e0e9be60d192f6c9be7f735b5ca17d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185972 Malicious code in cache-xml-stub-fire-nu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a2eb0e7fa0e94ac62c34a36f3df12ad663540f26fd5d5989d0e3c8dbfffc90b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bioinformatics-proxima-uglify-js-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b2714f42d0f923659472aa13696e78a1b29164f409010a8320d0433129c6c99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187637 Malicious code in juno-pyxis-barnard-perturbation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03ba7667bb839b545547f830a7cd64064ebb2ed6a65582c2229a5f9a02be6dcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186835 Malicious code in eslint-config-jovian-middleware-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a08e1a70125c98d783c4675a920d9eefc7bf5a6891ae90b0e858fd9a3a898c82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...