MAL-2025-187014 Malicious code in forever-regulus-hyperion-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e2062bd268855000f106c9a6f105144d5b14e41d4f378ae8cec59bd4c875dc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186040 Malicious code in catch-stack-load-public-grep (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15c509a0b517637027dd9226985a76750f86dedd7bb0dcfaf6449347750210a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189152 Malicious code in relay-dagda-sync-graviton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70e2fa9140c056d951512eeda4b917c4d77a95617f974d632aeae2f8e5465c86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185904 Malicious code in boson-module-subscription-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b125db232d506bacfed4f1c5a620f3576c9251eeb7e82fe2ab4fc0f609df2ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187338 Malicious code in hercules-pyxis-rehype-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6bd5be5cc1ef899ff08e6d1c416a3327828641b760effeecae17fe1c2c25e2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188032 Malicious code in meteor-singularitarianism-procyon-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f87e7aabd6edcc6661dabe6c7ba3b26e4096378ffca7f6816c4bc5e8e82a9d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189463 Malicious code in server-nebula-cosmiconfig-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d990e48bbacd130f5620b5b20983fbbc4001f0ff552a7c6e169141a13af346c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189265 Malicious code in rocket-vortex-nebula-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cb509f13958f7a7b72ce609e2825f1e19061e7b2d65cce6416a6e965c065359 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185835 Malicious code in biosignature-winston-xanthus-octans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e90dcc2ecea82bf4db69b8db7b01c821564ccc7f9fabba05f79f2c63202efbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186351 Malicious code in cosmogenic-genomics-scripts-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ede3ff97afc807cd5b2f66f1660a934b572b18c219fc1b17e91ba7f10e09e5b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186661 Malicious code in dysonswarm-lacerta-unuk-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1d4ff271822892355055959d5575c07ac632f3836ddd6d8337d4c9f6915e83b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188021 Malicious code in meteor-dysonswarm-geckodriver-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a885a9e540e123aba57de65173041c29a0894ea5ce3a14b3f8c7ef0369341f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189916 Malicious code in theta-validate-meta-air-cat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21d3e186b062df4165b4ff6124f4467a91df506dc840e45e44a67191212c48ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186496 Malicious code in debug-container-zeta-load-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c066f1f70682712ef0317f6958763b00dc3f36c2f09ae739d4f22feb94c69d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187851 Malicious code in loglevel-meteor-mui-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ca35c471536de6395cd1a455a18886f5a26d7919adfe6f44006c4879d894dfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in whitedwarf-fomalhaut-nodemon-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 485383a1d4793fa4e99c507b8c6475dfc9bc9e56e6433a5eb09c6255405a640d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185511 Malicious code in apollo-xo-bulma-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d53fa6d63360ec3de4a80b2c87d0ef1b1c8be878f55db4510f568325a0e0271 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightwatch-javascript-kastra-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1502cb2d438c26158c0aa98f86013e06d8d4438e066e035cc159953501e1719 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scorpius-chalk-eleventy-kaus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0a057c21c71f4226b5c3f22f8b0019b297ad4819093ac6ee0bb78d98783e730 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186206 Malicious code in colors-paleomagnetism-global-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c366c6bd8a589278cd1a92d3a0ae616ad4906438cfb8e95c8c0715cdb1c6d208 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...