MAL-2025-186039 Malicious code in catch-float-cluster-assert-load (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aef58c9f874c23e8a9b27a97cbc7a46fbcce68e4f6bba08731fce9b4108467a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189448 Malicious code in sequelize-slidev-forever-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7d1f9d87e5296caf1b7c624845186eef2f3d3f442b9fd68d4216c088d7c779a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190025 Malicious code in uglify-js-gravity-upgrade-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7a40d3f6e3318ba9e54e62de53776b9b481eb965be138be7632328a3c7ffa76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189200 Malicious code in resolvers-kinetic-eventhoriz-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10aa06e998c3d788fa72d46ef212a5ae000339d3d9b287dfddbbd99d288cc440 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187175 Malicious code in global-apollo-dysonswarm-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8624af2234afa89e899457b5b5c227d1c1b09212d1eb8b2a207d466c14a8b2e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189891 Malicious code in test-theta-old-yaml-eta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3105bd46bc3bf37e1426594d233e6aaccf8654317b65946cf727eac0782e7db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187785 Malicious code in lightyear-cors-quasar-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 429afdc097b789886b2f73a40a1eb7753fceba27a84af51e06977ae222b5f0a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188749 Malicious code in plutology-ariel-subscription-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7586875995a9248c1bb0d69061389e43a86bfb28b5f8a11e6aef21281d3ed47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189265 Malicious code in rocket-vortex-nebula-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cb509f13958f7a7b72ce609e2825f1e19061e7b2d65cce6416a6e965c065359 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187124 Malicious code in gatsby-tardigrade-hyperion-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 045b9fbb41e669808e8b242f695e928285d9a881632315fefcd95b7b3149f24b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185965 Malicious code in cache-meta-root-try-key (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0e240ecaa5180d2c3bb0773d383b7d3624ca22e35d3c052302961ef5c975b67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185570 Malicious code in array-simple-water-tau-book (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30cc8225a97aed8f4d662ddf94085f9e9c314a50062c44fc92cd45f49a066f37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186913 Malicious code in exoplanetology-link-commitlint-prosthetics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bfcec8783f7472850817c3503803a35451836d28a4f9dfdb5f2a6cddf295c61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188441 Malicious code in ophiuchus-europa-charon-blitz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e44526855cca25f3722d9837807468169f2a527c7ca060af49086605dac9d3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188245 Malicious code in neuromorphic-venus-aquarius-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87e9c7f34fa7c528a1ccd96c62a29363407f96ea1bddaf382b494a7a3b5411c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190410 Malicious code in xo-nightmare-magellan-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f0b83fee59dd650042e6adedb72297944d892fb054fc0abc747385fdae4e758 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187630 Malicious code in jsonp-hydra-neuromorphic-void (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d846a84569f47fde495902906da6a1389c1da17054f67fd652782bc62b8bb6b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186633 Malicious code in double-final-proxy-gamma-alpha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4ec39ff7bf59b56c61810df48a1d2af795708d4a5b19120dd66226393f90420 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189756 Malicious code in superflare-paleoclimatology-pavo-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39d337f363e6d9af72d6c6c58ab9d0b6cff009263226481ce03f76293b809c53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189933 Malicious code in thuban-run-script-octans-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41bcd540d3089d4cdee49cf3fc5e84101e85b4b10116b145f1f13927a252e045 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...