MAL-2025-189990 Malicious code in transport-xanadu-delphinus-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector beb9f2ccb9d5c8590e1737a03651014399d524be681aa954a7567bf8f1ab7a93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187456 Malicious code in indus-coronalmassejection-sass-loader-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0136da2a3eab2db131d20c5f0b95415457e01a996714a3b8ed1f5c147cd38b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186064 Malicious code in centaurus-neptune-css-loader-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0908ef85e2b7fe9360387bd155ca3c553dcb970ba235726eda56533fd71a985 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185667 Malicious code in auth0-sociobiology-apollo-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2cc66bc3119f641f4265e679da99e399682b5bcfac97ff78b266bd68c7b2025 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185733 Malicious code in bad-hash-shell-interpret-compress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 316f1a952d8d4f9ff2d20791bad79a3bf3fe3f2c8559da46bb62c4d37f47d468 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186710 Malicious code in elektra-xml-grus-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c8f6f9bbaf6c31fa6c66d4f459eaf167a741ccc0e66e0a22a5941bd34df4e5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189390 Malicious code in scripts-private-frontend-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17ee0d82e7b76d99e98e6b5e612406912810084d5b57d4191123608980275a0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185858 Malicious code in blitz-hawkingradiation-helmet-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aecede92c259914338e21166ea4de409a5c0c2c18f2d9985ecdb8a0aa42964bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189054 Malicious code in radiant-event-bootstrap-geodynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d884f8f8fe69d800ff13733a4da5865fd63f1846cee21ddf7997124ae41773ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185758 Malicious code in bash-runtime-log-static-java (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21062ee5a5c866a7a6204e3bafb9fb0218741fedf29e9ba1781673b1216dba29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188950 Malicious code in publish-magellan-loop-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68faf84b597f7baf140863b199982368f3f7446f579a20a5a96af021380178f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185641 Malicious code in atlas-standard-ursa-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1c6f3fc3edf4f35bc1bbdcbf1b42b067954257dafb13d5506a7dc70a03f6785 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186216 Malicious code in comet-mutation-commitlint-csrf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bd2a460ca0073a03ed3c72112f9aa3039146098c9d9b9c319caad2451f7ab58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188011 Malicious code in meteor-australis-filament-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82d038323a86465eb976d3950a5e25d222716df1de1bed41c119a8f11b7642f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185525 Malicious code in archaeogenetics-ganymede-paleoceanography-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 074f632db2abe61d259b3bc4c1f8b0dace7f1c727cfead5c4c2611a7642171c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186619 Malicious code in dotenv-parse-variables-public-cosmiconfig-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9e2cf5e995e7be6217368c91ec8ecf853022838cc7a763cbcc73d49e0c23b00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190354 Malicious code in xanthus-cosmiconfig-nightwatch-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72da61120c59c0bf43b0bcabd6f42a48b27ef2a01ff506bb7c55abd2b2b89c30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187560 Malicious code in jabbah-blitz-kardashevscale-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4011abbf08341d1fb7ee6940821bb4f174b5d2cbc04bc0d2b44148c74c88e25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188422 Malicious code in omicron-short-water-easy-beta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe1dcdfe4a6ddfceada517aa147ac3a3ae9554745ebbefbe636b7fd0618a482e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190420 Malicious code in yakutsk-server-hydrogeology-saturnology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94ddcdd1a39596600453c1286cdf1de0aacdad289f6dea9f82289d39605cad22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...