MAL-2025-187339 Malicious code in hercules-radiant-jekyll-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73111aa503221d795d0710ce76a4fd9d59a208670ee93ff17fe08fbbf0aafb19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189957 Malicious code in tool-pino-xenos-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d08fe06f64a30975c203a857a87ca23f3ddae2ca1e75508202c57616eece815 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190326 Malicious code in wind-quick-char-yaml-thread (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddce2ad9ae1e5a7ff23e318e9d892e2368904076cd87af82d0c6e57a8ee5fd2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188675 Malicious code in phoebe-react-bootstrap-heliophysics-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68274b408b6fb2382a5f5a2aa275eed20c2fe6bf4f3a8f6a33645d810c97545f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187541 Malicious code in iota-levels-foundation-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00c2b0af1eef0fba29bf292945385ea48af585baa02b34ea53e9ae76e24eca73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186001 Malicious code in capella-tethys-lynx-antimatter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3bd723d35218da7f1893c877e9a4ed4feb0ca1f191e3971ab7cc91e3f7fe418 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185694 Malicious code in await-husky-electron-builder-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a86a1bbe4cecbcb8f3590b941a42cef3a87592003a2e822f176e34decbd8f04a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188503 Malicious code in paleobotany-warp-less-uranology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e503cf1f4b68ac4105f21495630d3b3ab9fa830d3e32df743899bc45a7467430 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188277 Malicious code in nightmare-semantic-ui-init-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dd9e5c43cd91768bb1e1d176eba1c1544754be3fbe8355a892cc84adb8667e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186109 Malicious code in changelog-graviton-hadron-panspermia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4654a7b3fbdc91ef9d6bb9b21a92ed4ef7c06883f0343185ff0493e3af578e1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190267 Malicious code in webdriver-manager-venus-coronalmassejection-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97a9f79b52091ebff932b871168c288a94bf9d5c3465addfc54adbcb69c3ca52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189623 Malicious code in spica-html-webpack-plugin-kronos-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82181ab2b25bcac772e3cecded34360db1572cf56e392f5f6310c0335bed342a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188367 Malicious code in nucleosynthesis-backend-local-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12f0e575dd8081f33d306cedbbefbb2c089c82765433643badb89e418944ac93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189136 Malicious code in regulus-protoplanetarydisk-quito-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68aa10411418a1e9162ef35ed572c716c7be7fd3f732221752c375e50f69b740 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186648 Malicious code in duplex-parcel-nodejs-membrane (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa06346c89852e6b9c279cbd0b49045bb71d5ff9157585fa04bc9c20fbbf44d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187217 Malicious code in gravity-start-triton-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05dc11358c2821d460c58ed1e3be419761bd92b3c1d007e566b84d52e38f4132 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188710 Malicious code in pino-pretty-yildun-express-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 269ed87702f42dc45182c4c396bd4001c18e108c66d5f61fd4f3ac96adeee437 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186219 Malicious code in comet-orbit-umbriel-thermochronology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44ebd8148bd5f35738b7a83182930c3eee2f0343389f023bb854c42d9ee86047 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sed-secure-rain-water-omicron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dd93355c379fb04cebb47c7a76029b9ecbc852e8bbaae7413f21844b2222cb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185614 Malicious code in async-cressida-umbra-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d16d7f344a284484ee4c9862dd2dd6ac94ea09769be191bef503fb4a7288385f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...