MAL-2025-188023 Malicious code in meteor-fermiparadox-pino-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4475a2700a3887c2ee6f081004405d01e2a1578c2ef22298f54d0b30c7a1993 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190250 Malicious code in wavefunction-perturbation-stratosphere-supercluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73c2a5688743fb7f4ff61a834dff95bc245f6cf1a7ddde56e9b51dbaeb8cd2d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187753 Malicious code in less-less-phenomic-paleoclimatology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a7ce82d0de177a86da9faff7ef6e6acca5663e15b9edd4f70881eea4adcd72e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189955 Malicious code in tool-dotenv-parse-variables-gravitationalwave-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d59d0461180ffc4af84262e680f656ee20570181f2683a7d035fc9e9f86b8628 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190109 Malicious code in ursa-jest-antd-helmet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d33c8be0ca0bb199e1726c8dc39437ee5c00d4402fc8e2a2ea5ffe0b0846ad2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187780 Malicious code in library-kronos-start-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 809337d37e779bd9ce52e2cddd68c7fa1c0fb249e9ba2dc8d1c9655e1e3eea5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187309 Malicious code in heka-relay-grunt-gammarayburst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a34c9f4c51f9fbb8b1a6af7224378de5173d0150c7a5c3399e7e8ddb1e5c9e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187712 Malicious code in kuiperbelt-protractor-epigenetics-kardashevscale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63ae2935eb69514bce31e2c9fa57cb60e6fb9ef6dd0a9014bd3a914697b85068 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187313 Malicious code in heliophysics-pino-umbriel-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68d13fa24ea00cdcbb15ac488921f9c6c192ed00f12f1b47d659992b4fd4f4a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185628 Malicious code in async-public-eslint-plugin-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8260827b01d06f49fa980d26d357da964681809e032e0c1e4ea86afb5a6ad66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185655 Malicious code in aurora-nodemon-whitedwarf-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd97281221fe89d74fd42bfb63573c9c1be04ca2dd3dff73ddf81fe566bffadf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187448 Malicious code in impulse-toml-despina-bootes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e30ea46b93efbbe7455150310508ae764adf5908598dcdf07232a5262db6eb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188921 Malicious code in proxima-thermosphere-weywot-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2244dab451a96c625aa78d793fcb3ba1931ffe5080498587c46c6bbf7f5a3d62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188946 Malicious code in publish-antimatter-augmentedreality-hawkingradiation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0d5d6b123e34a8689a89de8c4284bac809a0af916cf5f51956e0bb8bcf35c67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187035 Malicious code in fornax-phoebe-jabbah-xo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89ab6a4c8a169e333e9defa80910133b4b619a071f3e744ce182a3d24ec5ef6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185477 Malicious code in antares-thermochronology-parallax-blackhole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1edfdd0642d9a4048a8b1734c5efe86d4bab6e2ec788036da89cafd83cb23f0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187253 Malicious code in gulp-oberon-husky-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e75617fbb11faaa49b53d3be3e65087cce1580f4404bed0e40ed9913bed877bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189765 Malicious code in supernova-eridanus-radiant-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ee3338ad4519b8b64d9dfca4fe1ba0f2248713067c8006e90c89bfa27497b55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in janus-hapi-ganymede-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c51d1d80490a8edab4326366977f4ecda45c1d5cf1496de3d5227d9066fd684 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delphinus-ganymede-sadr-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bd9091fc6ac414ec5489f2792c694a2abc49dc516b02b637f49f5f797997770 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...