MAL-2025-187671 Malicious code in kastra-oberon-spectroscopy-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2e7279e1ca549eb0a3e63cb167e9feb16a51f1dedbbf158bf38ddbc2b169e23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189553 Malicious code in soap-comet-adonis-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ba309579742e145eec67128cd1726f352994bbc24340da2452433bad6350725 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186048 Malicious code in centauri-leda-playwright-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7671ad2b6e8453e44752aa7977970a925b638a23e89cc48acf0f5ed0d5abd921 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189840 Malicious code in technosignature-taphonomy-pino-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cb950925743b43b318dc4f6962ce166fc091c100004eeb753fc231ed2ca9452 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185384 Malicious code in adonis-child-process-pegasus-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3209c8b1de00a411a153a4f8dbe6ad93c7dd53375702b75897914da7bd3baf36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188802 Malicious code in prettier-plugin-markdown-exoplanet-saturnology-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5035fc7034177361a11d4b4e27a3fba157faed7231117410427c76e9eb30a1e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186238 Malicious code in commitizen-antares-magellan-saturnology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b1c1df5aa59f1547dc7c7f609cbd53203e8a2d44e63c739099244c9ac7aa5e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188505 Malicious code in paleoceanography-shelljs-umbriel-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2386202e5955957868e619896d6eb531b3f4a1f167c4964e7c4ce5d273871974 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190488 Malicious code in zooarchaeology-mocha-markdown-neptunology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34f7d5b9e7d646335b98b3484b258cbd866c1a4bebb4a13bd382f0b097d0be63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190193 Malicious code in vuepress-process-sagitta-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc981347aa1ce9ba4a3d5d67b8fc8e0149124ab031da8c5695ae9fd361a5743f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187278 Malicious code in hapi-protoplanetarydisk-halley-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14eed49e06d77509c188f6aa28a040fdcf9a987da14db1f3667f27101d6633d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186086 Malicious code in chakra-ui-ethology-biomimicry-superflare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ec1a6bd4839590111dd4aee2301174b7baaaf80bc633899c529eda7de74071c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186180 Malicious code in cluster-decompress-double-encode-quick (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e10963e1b5a699315201d9cc43a9f176273375135c17ca2a87f1f06dd03cd0ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189725 Malicious code in subscription-playwright-public-carina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 701a8a346bf74a50513bb9a55b5b268f778f18a886f3f088e3fa641fb990991a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189798 Malicious code in tachyon-lacerta-relay-mdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8741edebad7eec01082ae61ad292f9f73ed7148cb75ac77435d0c139d964f0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189305 Malicious code in sadr-membrane-slides-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9f5afa3f0909d32cb9061af02d912fe9587dcc198b2456101683b37f285bbb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188519 Malicious code in paleoecology-cygnus-jovian-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5500c81461efa90c81a2aa2a1ea4cf6fbcc0a115124d9bc58b2f794f4e2f6b4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186548 Malicious code in deneb-juno-virtualreality-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8ab08056ce07e4b0fa7e42cc1a807d96b6b0be4eece882b85ff70488bfca3f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186909 Malicious code in exoplanetology-comet-mira-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6dc4857a09d7da4d8793951c39bff14b1eb9b1e2b75cce02c23c2c1dcd8c9ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186508 Malicious code in decrypt-import-info-optimize-authorize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a59d67888e31511b979568f205c52f652170fa14821b80328addca5fbf3deb9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...