MAL-2025-185378 Malicious code in accretion-kastra-nightmare-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e97e293861df5ff3ff1aff45ed36a2f258e7725f0c175f8fe5ecd58ecce2f20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187604 Malicious code in jekyll-resolvers-quark-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7dc947279fc7b4978324c611197f7ba4d99cc1748bf2d4d42d7484d8dfe30bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189127 Malicious code in registry-local-biotechnology-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9231156a824bb7cc0a68e0cebf262d6d2457c813ae5b4c9f8b5ecb2229089b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186137 Malicious code in chi-mu-socket-cold-small (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0c962890667949b1dda36ebe56787555eacad6d8b589542c2a0f944f45c3d10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190451 Malicious code in zenobia-grus-readable-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf7f6afeae699f004a49669c40ec942ea5468412b503aebc4ef6a6dd68995578 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188271 Malicious code in nextjs-tachyon-apollo-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5808e78b34136ebba63563f7cd291a9023ea14a6a89294689d6a76ff25855793 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187210 Malicious code in graviton-greatfilter-crust-quantum-computing (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0ed0b33f4c0ecef0f2595c287e16b232bac42416d16b964853dc0c9da5af2f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188073 Malicious code in miranda-genomics-uninstall-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfeacda2b376daee22f78d9a59bb58433ef352a72d825d0910791a5051064406 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185620 Malicious code in async-gridsome-xanadu-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a279895093e63b7653ef1defaee79c1cb92b45475d3a6c650d3ca4ed7a056fc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189948 Malicious code in toml-jwt-docusaurus-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7137e5c7ace789bdd6841a632b7672fbf80556d0ed465fd3a20160f1b2d3d500 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186617 Malicious code in dotenv-parse-variables-heliophysics-wasat-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f18f0da4eb19316997c90d96ccdcd3fdbbc492bb805db52cc447d51631bb5ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185609 Malicious code in astrophysics-prosthetics-callback-deneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d0ae3b110625efcb8d84b8b454479ca3f743b784bc4e5716c246672824d210c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187690 Malicious code in kinetic-iota-lint-palynology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c31c4d01babb265d54196beb69e8d0c534671f97f10feb2b96ba2106a7919c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186703 Malicious code in electron-pm2-toml-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f39fb8a9d75395b1785a187dc32fd7123d42ea214d0d3cd4f9526ff421b0a685 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188286 Malicious code in nightwatch-interferometry-meteor-decoherence (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6a6c3541ea78c2ecfb39f3479845e5c39a51d9f757b6e133b00bfbbf73772c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188819 Malicious code in primatology-paleoceanography-mineralogy-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a547564613aed99a100963bdf0b3057b8aebc1084ae8fa5995b7d4b59157fb20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190120 Malicious code in user-analyze-uglify-minify-easy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c94d0917932065156b108cad7f2e61c6306259a6092dc4552f1a12045ad2f6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186711 Malicious code in elektra-yakutsk-cosmicray-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64e053063556b6ad51aaa35357c867ca4d8fbfbd2c51ef10bbd60a53ea1b3916 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190252 Malicious code in wavefunction-prompts-webdriver-mocha-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9133d1deb74b2792ed8706555c49fa13ce1ca719f838438eaefd5622916c5386 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187745 Malicious code in lepton-weywot-mira-pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1a6f9d66b6ec16e62056ff7cfe9f1e3211bb59ec315c9861d4881df2c50af75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...