MAL-2025-187931 Malicious code in markdown-pdf-boson-magnetosphere-paleontology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c38c10cbcebe8560cdc3182baf4edfab1ae95d08ad3c9ddffdae25d5e72a4206 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187018 Malicious code in fork-eslint-slidev-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14f8ab67ea8427ea5b62140b04dc5a91e4b2512ef31a7be5a7f29ca3f838dfed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189756 Malicious code in superflare-paleoclimatology-pavo-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39d337f363e6d9af72d6c6c58ab9d0b6cff009263226481ce03f76293b809c53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190444 Malicious code in zenith-algol-nodejs-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8969814a3881645f0614d171a6b2fd22cdba8d525d39f3294b68a498f406e91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185823 Malicious code in biomimicry-decoherence-paleomagnetism-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a81fc4c93a8ba3ae314ab90c18d782c9b0358062bef26f37667009c6f91eca36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190141 Malicious code in version-aquarius-run-script-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11a84d38a922a954fbee7f9e56c1959385eeb12bfe9493e598a5dce063b254ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188406 Malicious code in old-grid-permission-gamma-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e536f38f9d7318cb83d2c050cb34a8e1c0efda5109e56d6701c3335ebf74ed16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186821 Malicious code in eris-umbra-dotenv-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dbf7714f75abefdecf0f36cce8d8391b67049c271697d541efac035b1b66ae5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189322 Malicious code in sagitta-shelljs-halley-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c27d14c78f0650cc9e36a6a09704b5376e65f49f575b3bcc650e67f28f0dbb37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185368 Malicious code in abstract-mu-kappa-authenticate-decode (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d08399beef713d804598e044cce8cba325e7407564b93be665a8a65372e6fe1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185586 Malicious code in astro-ignite-scripts-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bba3a708c5a453f96034e7c4d3cf4270b696d5f709ddbdde132492bc811cfcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189156 Malicious code in relay-neutrino-procyon-stratigraphy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18b46d1421bf767e864fb70e46a380881c11baaf943274c94aeff70da06d51a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190449 Malicious code in zenobia-colors-neptunology-darkmatter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9b8249ae294511d610655905c87f50f7eef24561025407ea2e5d3685fa1d074 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190226 Malicious code in warp-ora-duplex-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d66ff385a22dffe023d98891710432d0c59ead5f5af2c822fff70f98049abf12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188744 Malicious code in playwright-quasar-tachyon-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29e1811086e60f8c2705e4749e9f39094f5019189effbebfe1ef6a7c767217da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187017 Malicious code in fork-crust-filament-kardashevscale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eacd2de681ec1c3e693bda71b1a50f3636b7bfc63e53f158913c115b5c5e658e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189985 Malicious code in transport-postcss-loader-terser-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 631fd17e74b28d64566d646ce664486a32476490f54ff15c546111e8e1fc9db2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187839 Malicious code in local-kaus-wolf-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a07177608ea4cda7a96b7407c262d50c29c3b1cfc21b7e19c5d347ce377dd175 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190469 Malicious code in zephyr-prettier-sequelize-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8f33cc7656a725e03d077a064f3e7e9e32e71a10d7fff8cb27b483865200522 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187398 Malicious code in hydra-hawkingradiation-markdownlint-mini-css-extract-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03b436a9cc16222004be7b8cc0ef69d75750e55eaa73be4c230dc3ee4756c09c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...