MAL-2025-186759 Malicious code in entanglement-jasmine-seismology-nucleosynthesis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6c9ccd83a96385818a27d8b5a66cfe8783c5d31de6b3b174068672cb1c3b5cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189216 Malicious code in rest-rocket-lint-staged-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ef1e7e65a94f55f8c73c39b479acf45fbd81630246e7be641966e7229b33c40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190399 Malicious code in xml-proxima-rest-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a1102d2c7aae26b1696c4937b33f1603f7e0cb43277d6af00d48ae46b44ba92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188550 Malicious code in panspermia-winston-phoebe-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f7b7300da63723696da5bb34487f2b3691c2b412646c248b4e7c69a0645b7cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187161 Malicious code in geodynamo-callback-less-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45c4458ad3238e5de7a67c222d870ebe2709d938149bc1b8763330abcf4a23e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188972 Malicious code in pulsar-mocha-saturnology-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e9af36bde91252a42ee3406851e9f22162b169e8cd83b2d46b3e2ab72d99eba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188283 Malicious code in nightwatch-event-gammarayburst-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8618a6ac2d8d8be1023291acfd62ee0c8a82f6f62a31e2f78f2df4bce163aae1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187710 Malicious code in kuiperbelt-nova-parsec-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5005685248afcbff87afc6c58f65d21755259f517acd39c3c946f53539dcf6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187012 Malicious code in forever-iota-callback-vulcan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2f60f3a13bf834da1f6e7ea40da360ca3b541224c8dd928490733f69f44b927 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189195 Malicious code in resolvers-chakra-ui-bootstrap-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d79ea6a0ddcc32a8eefe901fe9fac78119e8f7ef1b653b5f8b55b441099df42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187462 Malicious code in indus-virgo-publish-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee5e343e832dcd592b7407aaea23128dadf679e0c78cc297bbd29ff497ab04dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187738 Malicious code in leda-pegasus-magnetosphere-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 320e44886a156614cb8756afb54e4075fc58ed6bebbdd91f2cfd702bf93dd0d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186700 Malicious code in electron-builder-lint-typeorm-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7e5beb67118d8fdaa1e144cb2556d1c7eb507b684f06c0a99770132a862715b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188507 Malicious code in paleoclimatology-draco-backend-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdaa0bdc30656057f5e04b2da3574851ff0ee47c443373d7c23e7650c44b40a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188572 Malicious code in parsec-wormhole-futurology-ablation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf1911b3c66def5ee6658e51820a9cae8886c4bb0ea48807cd601a9cdb960637 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188263 Malicious code in nextjs-google-transport-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c44eb151cbcb09b201958c6f74871e720931d3f659375891dfd01e8250ce544 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aldebaran-lyra-magellan-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a81adcc48a2be10a01cfcdea5d7b3f48aed02eee2a2b8df9e474f6f4d3026e7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kaus-antares-update-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faae86e3561dc9f38756cb2bfff0accf7d215afbb11969a94ba45bf705675a63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shell-double-gamma-shell-kappa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6beaa36268c0d7a1b2c981a93dc6e0c942240781f84aef9824fa33bbc0f4adf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bash-runtime-log-static-java (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21062ee5a5c866a7a6204e3bafb9fb0218741fedf29e9ba1781673b1216dba29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...