MAL-2025-185758 Malicious code in bash-runtime-log-static-java (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21062ee5a5c866a7a6204e3bafb9fb0218741fedf29e9ba1781673b1216dba29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186709 Malicious code in elektra-supercluster-genomics-heliophysics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 151aa85ff2dca1946cd00a3716ecb72519fd01ae04977e10d71f8a48361320bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185998 Malicious code in capella-indus-config-relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68bfa28ddf0fe8d14595cfe49367f754f2bc29b2a834ca5172654283e2f49c16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189990 Malicious code in transport-xanadu-delphinus-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector beb9f2ccb9d5c8590e1737a03651014399d524be681aa954a7567bf8f1ab7a93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185667 Malicious code in auth0-sociobiology-apollo-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2cc66bc3119f641f4265e679da99e399682b5bcfac97ff78b266bd68c7b2025 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189818 Malicious code in tau-import-float-monitor-finally (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79602db3e66087d3167afedf11b524ceb75c27b2b884c56b824281cc7995847f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190005 Malicious code in troposphere-elektra-supernova-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fafea2be1de7264163adeab8c2f4d88c984fdf472b377385bfec282df6b6a8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188606 Malicious code in pegasus-scripts-antd-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 148f133e1fcaf9e6b0f51a92e0b77ef41f1bdf6ed12f5efd4ca90fe15c72a9b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185789 Malicious code in betelgeuse-csrf-aldebaran-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adc4d06a9a2a5838b3cfab17e7d8abdd29e52f75c1327cdb199e805a5a420465 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187164 Malicious code in geodynamo-radiant-slides-bioinformatics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 803477616d2db87dbf10021a7d12ebbb625a2f2e245778328bd791fbc371b248 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189704 Malicious code in stub-query-psi-throw-secure (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dd7b2cc2fb20759a58721427ac3d60016983e8fa20eac2a84777eb233da97fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189481 Malicious code in short-load-user-slow-easy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 600c427ac4dd88f40cd0ddabf7f98443d4c4258c3bc18198c520b794f961865e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188100 Malicious code in module-fornax-elara-mongodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f5fd83f12dfdf42a042b92d48a11b6d2b5328ccfae5ed402dbfb93ba125db69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187261 Malicious code in hadron-vuetify-astrophysics-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a023aa918b6df89cf02b3fb9cbff1e261dbb97330b127160a907246a48e94bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186370 Malicious code in cressida-prettier-plugin-markdown-pulsar-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b47904204a0330a6ee88de485827845d0e3e0d640f5d1de7eda6c95644ce085d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186381 Malicious code in cross-env-dorado-eslint-config-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0985a4ef455f65277df5cbe81f64d7157822a1f417ec13d808b81967e4ce8e28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187585 Malicious code in janus-sedimentology-higgs-biohacking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d85c22284b92d13adc9467f232e0857fa609fb731d979a63d2b9deeb917c846c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188712 Malicious code in pino-virtualreality-cluster-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0a8a39dede87555b3f9d581416f4d22169c536c9e714a58d22911815b9f289b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189754 Malicious code in superflare-aldebaran-phenomic-quantumfoam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae2b5af9498814bac838f7d9c918f17bf3fd4ca2ae844e1bc829bb27715e6d32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187055 Malicious code in function-bundle-log-validate-grid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a35fd81b2277d6c9f3ea3bf6f2675c20d346503b3d766e1488c95eb5d44700c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...