MAL-2025-188854 Malicious code in promise-carina-astroinformatics-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2014f330645c8ea66f04b127b546ef18c580803da86446ae01e44eb618d71419 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186042 Malicious code in celeste-baryon-stop-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 846401c80326a995821fe08966683abd9e419a6930435b3f12e358b285781155 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188408 Malicious code in old-reject-mu-char-decrypt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 795581f673163aef7e16e1a617f1c1b6d1f1fb115d6ecfba311f73909abab4d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189685 Malicious code in stream-janus-soap-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd0748be6aaa678054ffec1227c9412d1378a7a4ce501ac61fd6eab94006e013 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189142 Malicious code in rehype-darkenergy-neptune-taphonomy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff8e7dec04b1f7848c420cbc1d806bb0e2aaf9933831e68559c22c7c39a63051 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188049 Malicious code in mini-css-extract-plugin-paleoecology-redis-release-it (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5de46289f1110a24c23bea5d0e9a23619502d2752909ab64be08f9fd83e00ab2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189318 Malicious code in sagitta-protractor-taurus-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 266c9e23d1090c912eeaf40a4ae1dff191771a30ef3486e1591a591c9ae91aa6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190180 Malicious code in void-grus-superagent-planckscale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20a8a9fd08defaff05f5feabf694f5b971ed1904512ea95cf7ae5be645b34d64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187678 Malicious code in kernel-stack-grep-zero-table (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8586af4b87f0584e7f4565c38a5854e41b7072c3d9a2187bdaf4eed44194e82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187575 Malicious code in janus-mysql-delphinus-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e647b81dbfd5ee7655c95b369e7c6378d99b0066cc26cbd55fee232abdd2e521 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185834 Malicious code in biosignature-spawn-slidev-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08678df57d0faab58f3bdefe4aa354744ee16d6eda67bc9e6e1f9b7178654520 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189238 Malicious code in rigel-miranda-cache-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f24d18ebd38c79524545d193434c68697eb21e47a21abb2e7f108ae969d00566 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187419 Malicious code in ichnology-archaeogenetics-repository-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d427b21d1e1c3f178b62ed1bf3f46c5e28790ff762162804d7d4a5e0be1a2757 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187223 Malicious code in greatfilter-process-mutation-crust (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3971c42a927647f77a1da4f4193dc48dd00e19eefd701b7b76edfdcb982e05a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185978 Malicious code in callback-parallax-slides-metabolomics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d8e97f8094f87a6979742f141b60d354237a41ff9eb015264c2ebe8d9de2bb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186072 Malicious code in ceres-perseus-csv-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30c056932c3d3448bce628b008892baa0861966b26f7034bfc9a2259f6077bc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187619 Malicious code in joviology-nuxtjs-ursa-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 737dee137a220a82e1a7d331694f492c4100fecf3c4335d253e40036ec0cbef5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186883 Malicious code in eventhoriz-stratosphere-polaris-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4368f8dd780993d398046a88d6324b8930c167369b5c2e9e09a85da327a90a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189256 Malicious code in rocket-dynamo-supervisor-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80b41f5a989473e5be9b2bc5751e31d7d24fad060b49d6606c000ce2dc8d72f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189958 Malicious code in tool-tailwindcss-cosmology-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 024cbd055f4aa386cbd24118ce725f651db3fc425f37acf6453c7e535d8d1d1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...