MAL-2025-185776 Malicious code in bellatrix-websockets-filament-biohacking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b482c2d556ba583b556025d321187a786b8b6b58a20043a55dcfaa188e66080a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185423 Malicious code in aldebaran-stratigraphy-canopus-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9267766ff4b1707db860cf421d551cb04b2962f5b3709588c0aeacad5b716c5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190389 Malicious code in xerxes-perseus-antd-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81323bf2213ec382936f574183e15746e0cdd853bd816099879b73532eb5af70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185896 Malicious code in borealis-hermes-bellatrix-geochronology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aabad0ccc360e1c279a67510ebabf3b3e012a1b62e2c156ad51176eddd139646 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185354 Malicious code in abiogenesis-cli-start-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8fedbe24747fad784a07c56896720db43b38226d30e4d557281b607426d706a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188237 Malicious code in nestjs-astrometry-geoarchaeology-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4ce8afc89dbb4d9b8803c81b1f7a4c931f3edf36f43e471ae33f472e8148e7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186138 Malicious code in chi-omega-permission-analyze-warn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1a333a6ba154a9285b807d782dbb2c72106fe930ef975007fb54ac5d2a6d251 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187049 Malicious code in framework-umbriel-mongoose-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b42f5a2bf812a423565a8afa97eec03ecb98096dfa30fdb3f61353f872d6dcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188395 Malicious code in odin-babel-ignite-abiogenesis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbd37aa3a95860ce014237b274e8d7b3e67d3ea95f530cd7113f4e831ba94719 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188077 Malicious code in miranda-lithosphere-xo-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f1eac87038018d949f144f833ce309a39c90f8dff7dca3d342001cc46bd9217 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189550 Malicious code in small-web-encrypt-grep-serialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a81fc5c680cfe648386bcfd84c9ba774b59c64cb8dcb286e9d2b4ea9547b42d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189521 Malicious code in sirius-registry-webpack-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c310c475846e8ee5e7c18a1b32e566c7929067fa02791639c37510e9d7820c0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186568 Malicious code in despina-lightyear-yakutsk-jwt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9d11c08b20e05e996c180e2416cba94fd964d29b9e6d37754e2bba18b905e5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186711 Malicious code in elektra-yakutsk-cosmicray-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64e053063556b6ad51aaa35357c867ca4d8fbfbd2c51ef10bbd60a53ea1b3916 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187083 Malicious code in gacrux-figures-postcss-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddff144498a159f4f0aa53d17350ae7278a0691307113dbcb07ad4f8a5671e0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187563 Malicious code in jabbah-titan-eslint-config-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f920754dfd3526e4037f94d1ee2ae2205d9eae6df972819a37ff0a02087f6c79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190053 Malicious code in uninstall-higgs-aether-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c93f13578dcda6182e79934549bede67a3b1738eb245215959281e0e1d0204d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186606 Malicious code in dorado-hexo-sqlite-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a4a93ae9c0b359cf320351a3af5fd7016688cc60265a5c221a86d43cd0faad3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186729 Malicious code in enceladus-bionics-pulsar-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc471c541f583382db9548197fe8485291f4471086b4171d2f4b733bbb4f60aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187162 Malicious code in geodynamo-draco-cache-thermochronology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faf8bc17f4419109058b137dbb7f9cfea702b6352c942c830cee9294fde9f0f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...