MAL-2025-188740 Malicious code in planetology-virgo-archaeometry-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a306eb5c4f40ca9eed5e5358af762509f337a8152ea0a8021b334ad4454ef58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190439 Malicious code in yonder-rollup-dynamo-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccb52551e42d4562dd9b19f350c065ba155117fe3d515aee67334e1a53d74ad2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186170 Malicious code in cli-webdriver-manager-lint-staged-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f52aee155dbc4a5e26a6be2c56104d10c6f19afe48943d15592317697736872 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186605 Malicious code in dorado-development-troposphere-futurology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c034220a0cea0d68987ec959d28c9d17a0464f2ad7d15be247c28fac8f9494b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188405 Malicious code in old-export-class-cron-deploy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5de005af7b5e64e3e82f9ed4604efbf0af837e477e4013fd75f9512922040602 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187685 Malicious code in key-refactor-finally-optimize-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d884c51afdb274f51556f45b4b1a3cd67fc75bce3d5f03fea59a2f25352a3e11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187843 Malicious code in log-byte-cluster-uglify-error (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91a9a1c276a3172723488745e2cc07805491a51b87c3a35688d78fd9b7cbc249 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189387 Malicious code in scripts-hermes-pulsar-neuromorphic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c868f2b930f8cef33f4482af086921d64684fe465c818ac9af2b1f199e0a258 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190037 Malicious code in umbra-farout-barnard-redshift (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3deb299289ab58a5d665be2d8f00891334e73390e4ea998ace64dc54f4c5613 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188177 Malicious code in native-docusaurus-xerxes-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f76fb1a9a37978f3d3ec184f31412f0c5850cada7278ca09f41b5f50858bc552 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186434 Malicious code in csv-steganography-sadr-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 576c9c5300d33eedfca84952fa6d232cca75ad84dbeb63ccde6da8ff03408c5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187303 Malicious code in heka-buffer-install-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d173a46b2222709ebde51168c15d95d657b1e4e9bdebe6edb1073438c8838fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190451 Malicious code in zenobia-grus-readable-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf7f6afeae699f004a49669c40ec942ea5468412b503aebc4ef6a6dd68995578 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185760 Malicious code in bash-unix-rho-sigma-quick (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fe99aa0b7ad9119be18713e63ab9d08cc26a6b086055864547b2748a50896a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185753 Malicious code in baryon-helmet-apollo-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e509619c8cda9fd9f1db9cb20bb317bddf00e771bcc44d0c746b082e3da2e4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189728 Malicious code in sudo-emulate-stack-deploy-psi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56ac55148fee2d109b41c3075f3a4e39294e50decd8f2b0fef35db75ce9175b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186740 Malicious code in encode-rain-refactor-execute-pi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06ee24f91b8cf6e03f7269a7f2c713ec12a15e887c78c0ea82e730ed28149481 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188916 Malicious code in proxima-nightmare-postgres-seismology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dddb55344319b54c55a9c4fc70b867ff693278f587db1ce1fafcb3b61df7e51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186927 Malicious code in express-cors-dysonswarm-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d813d65a50244ad3649baaef287695f9e5c9fcf145c42566664a40f4d368e4ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189932 Malicious code in thuban-charon-uninstall-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 743ae6cbbbc27159bd1e3230d2f79754bd82c0b625304d5cc5285d043d6b7002 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...