MAL-2025-189715 Malicious code in sublimation-archaeoastronomy-browserify-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba32b52b1e4bbb964b6534537b4d98d51c9e74683dea1516424471f869c0e5bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186942 Malicious code in farout-quark-joviology-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c230aeb0dbc961504d4d49ed9821e3c3a573289a1d57329fe4e15a004318974b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185526 Malicious code in archaeogenetics-semantic-ui-weywot-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd2d85b60fccb5653a1ef6424b8a8559da59eac331213af2d61e5276efefbec3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189932 Malicious code in thuban-charon-uninstall-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 743ae6cbbbc27159bd1e3230d2f79754bd82c0b625304d5cc5285d043d6b7002 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186371 Malicious code in cressida-vortex-lint-staged-blueshift (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d541b72f12f4ff134a895458ff7ace3372090c5a8033ba0c1df81b2f95297a48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188157 Malicious code in mutation-telesto-cybernetics-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e93feef1dbf14cc4a7a5a3b3d8135960ead9bd867f10c2706c5411df97417a3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187553 Malicious code in isostasy-paleoclimatology-thuban-augmentedreality (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3be9fca56893033202e3fe88e1169ef5561cff2b7cb0a16ba72d8c9f45f3f58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189997 Malicious code in triton-meissa-indus-phenomic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 543a5fbe2c634835f233125fa69f909d389d897543417caaff9c6fb9f9c7a6ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190084 Malicious code in upgrade-hexo-gulp-cosmogenic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fec89a7eb1a0e703849d699b2b85e2ad103da3e48674eb73284410a4a4e69b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190197 Malicious code in vuetify-firebase-darkmatter-mineralogy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72c7cb31503b963b956ff20f68210ddac6120ba9463afed7019619da8b0fdd14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189953 Malicious code in tool-callisto-betelgeuse-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3014b72f48d0cdf678c671d8bba429cf7ad5630d66432049d24216676d7ba809 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187412 Malicious code in hyperion-inquirer-galaxy-quantumfoam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9372615808f7596e3256e7d282d0a9e34ef1682932951eef2dde69efdb0f9e05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188875 Malicious code in prompts-terser-webpack-plugin-enceladus-graviton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d053da0377a86332b8a332dba7d3417176072d80fee11937868c599ab833365 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187253 Malicious code in gulp-oberon-husky-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e75617fbb11faaa49b53d3be3e65087cce1580f4404bed0e40ed9913bed877bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190181 Malicious code in void-kernel-integer-visualize-string (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b5f05e0ec952f376e136b94d492a8ee7e1a22454eba6b8a4cc89d33a5dba142 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186801 Malicious code in equinox-sedna-sequelize-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49d21c1e2f37e5e821a84eed480f80f27b364ea4e2b3e2b5cc5e1d16499a649a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186960 Malicious code in fetch-ursa-vega-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0d636c0752eaa2b5ba9b87b8801329c119b834f1e4a4d5790878fed205c0a6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190076 Malicious code in update-hadron-rehype-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f35ece84680d14ee5b47b141f5563546aeb735678836ac5514467735a7ed72c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188224 Malicious code in neptune-morgan-pyxis-australis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a87db8a27a89fe726fb48c35503b12c1183506aaf4a9a2d8765e08c568c719f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189939 Malicious code in titan-iota-carina-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae54b5aeb01b3b85dda4f78f0dacbe1fafb98fef139ef198836d50da8dbcd7f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...