MAL-2025-189820 Malicious code in tau-mu-good-beta-kappa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ffc911728d84781a700b5b9e706f5e42e1d50b3a29e8c8141b254da2aa124f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185585 Malicious code in astro-helios-nightwatch-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c597e6e94b0dc9824b4353d492fad15b37f4cfe800812bcf2c4174a1e8e63b3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185919 Malicious code in buffer-aldebaran-norma-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31792aa342017830dbe9af17d27809aea53e779e60fc233245daddf3fb3f607d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187865 Malicious code in loop-mysql-jwt-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 791ac5a1080acf1ebe75178fa67b303b7ebcadac3691bd02a0506a8a88f15b46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189341 Malicious code in sandbox-long-compress-book-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ee676fdf4a328f91380e094f39eeda1184a866c32f09c81103c42cf748fb558 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186843 Malicious code in eslint-plugin-fornax-auth-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be26c82a94b33272a9b5391a0f7fe3a8cb9d572639e42301d598f6ff497f416c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186941 Malicious code in farout-mongoose-process-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc7370c65864930ebd6bacf175c8b7aaa4380ff7bb716ed897770cc7119cbbb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189450 Malicious code in serialize-cloud-key-array-secure (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d01874bd4c7f5835f39f72b5f76baf3b4f36532a530bfe790cfd96aaa71f6870 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185699 Malicious code in await-rate-limiter-ophiuchus-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1583797f17b8931350761f69b3d6a8224213ed0a89d3bfece1cf00b321283672 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190074 Malicious code in update-barnard-rigel-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b80c2b2d41189c75ea3088452d80ac7c923a98a02010f14f29fc8329cd007b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190365 Malicious code in xenobiology-hermes-selenology-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 520f8b0d6c97bb10f487a3d93d392a620438141a0256a422bdefb4ae61f5b959 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189760 Malicious code in supernova-astrochemistry-webpack-supervisor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea0a97a162095a0ef04e01b4076c2c65caf6fe9f6509d012f347112f447a2040 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185697 Malicious code in await-mesosphere-meissa-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b34101e61927586d02c2c662fce1eff112c80ee71cd05aecf02621788752976 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187109 Malicious code in ganymede-public-canopus-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8666d987c2ffe04eca9ec038bd50b9769fb0d7618dc1d35751253b44ab3d5d39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189894 Malicious code in testcafe-chalk-magellan-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0defc1c288c0f0de3ca469123bec775b3116760a84b9dde2403275871040b7d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187373 Malicious code in html-webpack-plugin-deimos-toml-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bb045f13fdeba200e83090bae2409a07346335c9f563b24f275cd3404d87132 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188313 Malicious code in node-optimize-table-alpha-final (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24f260e0fad0e2b704b1d9ca6562b1bf2b8263f6a59ef27a984a33fb7e91cb2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186838 Malicious code in eslint-config-sirius-run-script-sublimation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78a80afbce79edd35b6742c49c7370920da3f1a0237ff091da1314fd7828be10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eigenstate-ophiuchus-sociobiology-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39d559df9f19acd3ade6c6cf4782d283afeb12dc0ef2bb84865475b6cbb34c0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188763 Malicious code in polaris-juno-taphonomy-membrane (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57aadb0c6fc2fa048e9640b5186c58a3bf3c7e138f166b104d24916c8d7d6286 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...