MAL-2025-186795 Malicious code in equinox-cosmicsilence-subscription-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1180d2ea46bce39936c28746c89d5b9410b1883fe47f962ceba2fd73e2b49f86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185935 Malicious code in bulma-rate-limiter-nodemon-aurora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 009a5f663c52773985c30c7de3050020ede21883b42f36c0dd75d76534b9b859 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188977 Malicious code in pulsar-selenium-oortcloud-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b9c392f64679172f81a2fc6e79ccf979dfbf3879ed0696eb339f8e1a4219167 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187571 Malicious code in janus-enif-tardigrade-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff78e85a54ccb460ad2b990e4270daacdfb20d0bd654fb34f0cd1caf7ff9a785 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189451 Malicious code in serialize-eta-authenticate-authorize-sigma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87ea06d5abf8267496be3939dc050bc4f5ec41b7b70514d1731aa0c872d926cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187203 Malicious code in got-paleoclimatology-nebula-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c594bf125d3e98c114785d243fe86ffa7d25834160d19bd9debc56f1fabc9f4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189934 Malicious code in thuban-zooarchaeology-norma-palynology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ca223ad610b7373f0f6839da1cc8836bab7633b5b4137db5b4f8ecd049eb12d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185749 Malicious code in barnard-perseus-comet-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6eebdf9f0730fb227de48935bda8ce5464b39db7760ccf5d354d4599c57b658 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187572 Malicious code in janus-fomalhaut-rate-limiter-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cd3841be35626649aacb44b41b13db290ef1dc661070b516c2e4823083cedf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189095 Malicious code in readable-enif-module-saturnology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5279ac86f66ab8845298dfe697a8693a0861f49af12492693f8f39123fcde609 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189728 Malicious code in sudo-emulate-stack-deploy-psi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56ac55148fee2d109b41c3075f3a4e39294e50decd8f2b0fef35db75ce9175b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188134 Malicious code in mu-slow-star-promise-eta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb9206eff6650a994f2c98e32fadd91c33b7fc08c2063ec41f3f3306a68044cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186617 Malicious code in dotenv-parse-variables-heliophysics-wasat-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f18f0da4eb19316997c90d96ccdcd3fdbbc492bb805db52cc447d51631bb5ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190214 Malicious code in warn-pi-visualize-catch-slow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fd19017ae32cc4971e46154fbd9e20fc1d6dd2eb27e09eefcee04c2372bf184 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188161 Malicious code in mysql-heka-version-saturnology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2111a15423e5ec2213bc83b5a7ef30ec0580c5fba728b2b7a7a02b828883b69b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185971 Malicious code in cache-xenos-regulus-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7ec47ff40e5433cc495d8db04882a9a62cd1feb321a80da2c7c82326de4718a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188270 Malicious code in nextjs-stratigraphy-stratigraphy-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b63188f2e4cde710478e23f743034e0ab25624c739497c27f75dbc61212b5db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188920 Malicious code in proxima-spawn-mongoose-brane (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6107ed4c94bffd5f357a8e61163bb0a8b7297755ea14dabeec5ed44bebcd0000 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189996 Malicious code in tree-validate-info-signal-abstract (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 698999b4d894fec9e7aeed2c3d4cfa851ccefeb92457f45e03cf92331e29f7d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189907 Malicious code in tethys-schema-proteomics-nuxtjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc52405d182abcbe70ebca1e32782e8c4b840ff6509fd47793c70c9d97a8b05d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...