MAL-2025-186908 Malicious code in exoplanet-xerxes-interstellarmedium-octans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56f6b83f3bf5aa13c5c240a68822042cd334b7ab9ca7607f5c0562f4b8966fa8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187411 Malicious code in hyperion-hermes-version-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15cf735cb22bc6f6c69e8c0af04d9a49053ea95e2438caf22b90dd1226fbc2e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186563 Malicious code in deserialize-double-simulate-interpret-tau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1114da922ec6e540f842f3f0bce3a0caef3f8610fdc2dec232c5995fa3a49ceb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in build-neptunology-neptunology-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed64aacd308317013397e7f8a5aae9ee24e87f51b7fa69048677cd32e333872e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in interstellarmedium-remark-procyon-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b67edcb7e03c7978ec0ee60312c057ae5dc8fdfc867993b5b2d333ba060e48e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zenith-cosmiconfig-miranda-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06eda7674a79fee6c5be9c0b91dd719af94d0685f5badfb5a22f5c6411273b28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightwatch-interferometry-meteor-decoherence (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6a6c3541ea78c2ecfb39f3479845e5c39a51d9f757b6e133b00bfbbf73772c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pino-pretty-electron-palynology-bootes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b36e22f77ac97013a394fdfb27730769ada345b6bc823b6adaff00ad707efbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187294 Malicious code in hawkingradiation-jupiter-toml-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 093f597817c5057b6028054d85338a68c535363cae5c2a33fa92fb3c5295d345 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188933 Malicious code in public-auth-hermes-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6acc8648d18302379a6ad78064207515f06962fd2044c6a0312ffef45670b15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188073 Malicious code in miranda-genomics-uninstall-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfeacda2b376daee22f78d9a59bb58433ef352a72d825d0910791a5051064406 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187998 Malicious code in meta-fire-validate-refactor-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09eee909f08829879eb110a52e86f4be34210063ab5cf8d951247c485d8594d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in taurus-bootes-jekyll-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 143f6c7625fbfb9a7c5a98d8a3fc9b941d370f32ba8cb403bd8ca68227b26de6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in development-xerxes-dagda-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7042445332cc153f5065a7dece3340b416923ec1504216b77f9ecb81566a7d5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in geodynamo-stop-hexo-markdown-pdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eca0a2915c66dd42a7b4e7dd744b1a10f4f2a0085b8213be501a8ef39cde5d35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tectonic-pegasus-axios-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccff1f983b671288870e7ba8007f191969e1bfa8964d96d55743f322876d114d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sandbox-interface-async-awk-proxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d605d85b24fa0acd2475a66a7a1eba0ee7f360ee3d825df216f0136d6f853d35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rigel-levels-taurus-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daa91034c8b8b7eaefcabb701f38524d7daf0f7c5118a46df8eb3ede6cf5e30c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in integer-pipe-beta-orchestrate-simulate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e55447a68009d0b9b6fa757453f8b249946f97b92a5891a39a495e91cec4d3a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in higgs-biosignature-inflation-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f6af5f94c074749c796605831b304d3b23f9cd7ecd27b0771334f6c877a95bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...