MAL-2025-189913 Malicious code in thermosphere-node-sass-farout-seismology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afedec7a9c064479a8e2564724676591ba3d6387ea85cae80291cab11358ca4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185917 Malicious code in browserify-sedna-apollo-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9274311e3df04e5c51c1bd2fd4419846f61128c31217b919fde8910c9c1e8e08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187687 Malicious code in key-tree-cron-serialize-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ff78953ae8c70b79b3faaea4d21dacd0a7182c0942619a5916fe974dfedf448 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190016 Malicious code in typeorm-kuiperbelt-miranda-tachyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cec24c5ca0521ea9c00f2358b3fe70121647e459666b4b63da967a70a180982f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188002 Malicious code in metabolomics-cross-env-antares-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 416c9d07d4bfcbc0f380096b82f6ae758880a86c41a1d9264e1b732e0772a9d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189565 Malicious code in socket-decrypt-tau-big-compress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 849529486d9d0d589a18e25c834f7a59aeec5d0fbfd60317298188a31ea6ec62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187379 Malicious code in html-webpack-plugin-version-vulcan-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dde5432372bf813eb46eb9929fc1e8fbcf613a4f116a4677f9fa73a2800edb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188155 Malicious code in mutation-local-archaeoastronomy-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98ab62bb148c77dd2d5c67896079fcfd49954b6069a61c7291227b75beb98678 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190415 Malicious code in yakutsk-blueshift-supervisor-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8265e7cc3ce2aa13db6c24fbe72eef89e0b1aebe54afa3c2299c0f4527b734f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187666 Malicious code in karma-cross-env-mocha-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc707037d54ddbddf16b2cf0245a7546cb636b2bd26cc4ef826e23f5433923df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188486 Malicious code in oscillation-readable-supernova-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b51ba16ddec20c5fa98e0be10274cb14d7ed4c223f9f5a94cd339d2118dff1d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188213 Malicious code in neptune-betelgeuse-halley-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0d3a2b6835a2e2cd78eb315d5e4b82e68d0bcb3840274c62bda761b9496ffe3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187616 Malicious code in joviology-exobiology-antares-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a983ca5a53cd062c2f7e73f4666acb407c180f401b30966fb51f59b1a69a552 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187646 Malicious code in jwt-jwt-nodejs-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea2e66daf01fe913231340ad3a2cdd91b8d73f807dfad3ec9909c4c942dfcbff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186088 Malicious code in chakra-ui-fornax-umbriel-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3365ea447d8e6476fd1db57f2e6c33bf854a5c9ab298ad0d5aaecd0e6f783ed2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186319 Malicious code in cors-standard-epimetheus-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38a0e58885cbe1280ac15b1de772db340d444deeaad728af9524fe0139441eec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189486 Malicious code in sigma-class-new-root-reject (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77fbeea5b52e1afb7cd1f89ed2cce35cb4dcb3522c66c0a9d069daa9a5422c99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188835 Malicious code in process-loopback-cosmos-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da04f28b11aeb888365841b60d588c34ef88e6c040b684fd9971c7131569f620 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189675 Malicious code in stratigraphy-castor-subduction-thermochronology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f95e074cf44d088a943a7366dcf7a4c1bcf3bd044d9b79a6733eab0a5ec6e5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190007 Malicious code in try-alert-hash-catch-index (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e85fc5860c00474af9c73797df5baec4c6920cae1896fe84f084c86f57a23547 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...