MAL-2025-185657 Malicious code in aurora-transform-protoplanetarydisk-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58b1a5eda36b79e09cac5aead692171647a585f3ce244f8b85524005bd4e6526 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188688 Malicious code in photon-sedna-hugo-palynology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 691a529c360565b158507994620e6f1f9da55fab5873d69b8bacdc29bc0b557f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186321 Malicious code in cors-zenobia-dagda-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4774c26a7e13e3aed6382b1e29215111ee924a655f6e4f8b58e9d34e7329f447 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189844 Malicious code in tectonic-pino-pretty-build-elara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c0bcd2058f31fec7229382d839c7ab77d7171eb0c186dc44476d099d33ed8b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188214 Malicious code in neptune-cryovolcano-dysonswarm-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55f65d6b8e5c42cddf9286d718e0a8cb42596b67738c40351857045aa7c2bf9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186028 Malicious code in cat-big-code-star-encrypt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3f3f6f9d454212a45cd8e581e11bfd884a5fcbb6280ff321fad59393e2c987a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188967 Malicious code in pulsar-crust-acamar-technosignature (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca5355cbd68aac1da711412886e7e3a77b66c193fddd4cfb2ff2a0ed9e7726b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188536 Malicious code in paleontology-saturnology-standard-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4555dd27e7e62780ef0984d432fb6a5e16fac735e5253883450924af4b600a6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190104 Malicious code in ursa-comet-cosmogenic-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd11b0b7a1927f924e9836d71f861f050ea05f975ce2f6fb00a09cfe62d5135f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185716 Malicious code in axios-string-kinetic-xenon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfc2d7a989cc3ab3f0b43d9f5d6a4b66f69e706ee1b91a078f519486d69ce06a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189199 Malicious code in resolvers-heliophysics-apollo-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60103abfcaa8fc26071abc38c8d81f1d5bd8f1c7ce82c117b98ee3f28734ac7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186024 Malicious code in castor-magellan-halley-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f91c2d58b576b6b398598b006ff7330ccf27b074f3ba12ea2377ed20fee56b1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187097 Malicious code in gammarayburst-remark-boson-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 189eb1d8deef0058a6d5b3ebe8e29eea889830c8792bb5de6f7daaefece15c2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187530 Malicious code in ionosphere-webdriverio-module-primatology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cacb870c31bd3d8e50ddeef025ab57d87c7da78f744eab59b8ed9e85e16b1d46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189074 Malicious code in radiometric-vega-element-ui-oortcloud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1260fed5837dd3c43bd4ecea72add038d82fbcf75ec543f03ca004f630806fc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188621 Malicious code in perseus-cordelia-google-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecebc93fbcf3aeb606dee2d52f301163a9c3530562ae4bc4d9ffc92e5b94d41e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187260 Malicious code in hadron-postgres-phylogenetics-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f7efecbc67236e9f7c84f6a8aae55425b28b28775927173eba1a0a284193afa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186973 Malicious code in filament-thuban-global-volcanology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f73f5c55ef7dd797fac9a3ff2fa06aa2cecac5d2db7aa246d25bc7bb936601ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187194 Malicious code in google-bionics-flare-biogeochemistry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 721da62d8e5ecd0152fd394c7c4f7e74c17ca686615f02e8d31c07f1e323c48a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187610 Malicious code in jovian-development-meissa-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 368fd919ca26defdbec74d1137345199e4f402a0faa4c12e098c42d47af0bd7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...