MAL-2025-189018 Malicious code in quark-dotenv-safe-run-script-planckscale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4a6e17931e4aaa6fd168c9dd241a0af9cc5a149837770053fa39c03d71da231 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189515 Malicious code in sirius-darkmatter-lint-staged-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac68762e33089807478b221c74a906d070cef10fe0699ea1243ff9090ef6d249 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189658 Malicious code in start-io-nightwatch-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06e2d1c8c06aa9ace0532a0d3a61dbaeb3cd2e038d997fe0f7dc80a93fd3260a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189901 Malicious code in testcafe-scripts-phoebe-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07e68c5cc63ecf1236bea18be4d8e0efb1e70538e8a54dd9d2010f86fbea1840 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189293 Malicious code in run-script-taphonomy-interstellarmedium-antimatter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51879f1dbe92808190dfdb4174790001ed7d379658ca47564fa784211fcb2319 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186131 Malicious code in charon-stream-fornax-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa4cf23b8f66359c49b529a6491ed2854491a148dd0446c95f06774ae3374ec9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187178 Malicious code in global-centauri-jabbah-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e054df192acb5a503fc2b8fab8fe9e53bbb345b829640946de23c47d0fc60e7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187593 Malicious code in java-simple-void-fork-sudo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a431fd38fe81d86e10d39de2b0de5f9e1d478535958d3b4f6dd4350bb47db014 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189672 Malicious code in stop-cressida-prompts-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bb962d5b873cf65209cbbdd3c78b29f2fa140fe48dc0cefcdabd5d10426b5ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187042 Malicious code in foundation-transport-xenobiology-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21f58e44a960c10e222f1a01f7545b9fd1ea02dd1bb91d718b511e3e182eeb71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188858 Malicious code in promise-hawkingradiation-paleoclimatology-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9699ad994533c1d515aa9b41aec6b38a1e46a1c81707dacd5c84fe82663b1f0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186305 Malicious code in cordelia-cors-lyra-accretion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 644f7a8a9d15a00959af84e0feba9ed8c935a3bc1ad53d9607a84119e0769181 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189960 Malicious code in tool-webdriver-mocha-prettier-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0202e0c6d5116df45f3fbcb466f9f4469417db5a0a3a8c2d51725d491a76e674 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188518 Malicious code in paleoecology-backend-hydrogeology-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20ac770bddada6d8683dab27aa4b1ff2328daf6bf4f00fd6061392212b35abb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187481 Malicious code in init-venus-sync-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41b6e40d812a9363fa5f719d89f8033b005cc387fbeadb50dac11ca6fcd9ba44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189674 Malicious code in stratigraphy-archaeogenetics-pino-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c8b8215edc8d75314fd70706553211c18d60e357ddd2ba33d98c9aebc7bfc32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189031 Malicious code in quasar-helmet-metabolomics-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acc8a6683ea8ccf5185aeeb43f7d442aaceebb4a6daf47fbf4915551e5ce2f55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189390 Malicious code in scripts-private-frontend-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17ee0d82e7b76d99e98e6b5e612406912810084d5b57d4191123608980275a0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190310 Malicious code in wezen-centauri-mutation-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7d4e1e5665d252d712f416cc304c4428c53b4bc67721b4f9f7c5a6f4ea43fb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188327 Malicious code in nodejs-oberon-ignite-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e482bde61fb3e85e4f0ddaf6dbd2bc2b7e66e9546b44fb6bde77934921f5482 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...