MAL-2025-187177 Malicious code in global-cassini-hexo-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5e8261faea100870ddc8b1d2bc37fc01e95b83d8331ba91092d10e31091009d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188943 Malicious code in publish-adonis-asteroid-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c94420588181dc182ea98ed43b9f6247af8b27913f519ddec433383a013e447 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189961 Malicious code in transform-blitz-element-ui-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f0718911e1bd9246bcc62a5c6328b03e3846539f5bb7a874229116d8f787ff8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185811 Malicious code in biogeochemistry-wasat-polaris-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfd9817d0db542f90d041f481385f51ac230bade4f1120e2038da39914682759 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187724 Malicious code in lambda-cloud-class-public-meta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c78c338525215779ed96ce7fa13875e8ac455bcf60b08cca5fca74fe837e685f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189648 Malicious code in standard-kuiperbelt-neuromorphic-sedimentology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6813ba4210065b547d71da8618762bbab598598fae2265b0e054e998d3bb2d00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185961 Malicious code in cache-cat-index-async-small (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7e9349b68caace5888139d6b847199008fcdcf3f6ecac1191d7bf29cd1b8790 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186454 Malicious code in cz-conventional-changelog-heliophysics-carpo-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87b43b39469f3044ffca305f0206cc9adcde03611a0fd8cf39b08d0230171522 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187413 Malicious code in hyperion-kastra-paleontology-magnetosphere (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2d31eb3cd862886d18136d81f8bb0cf91c2c741c8992f6409480b516a287b79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189456 Malicious code in serialize-stack-omega-node-authorize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7aed9f916c9a8d5708c398fd6560a52f8c9bf1bcfe4803b4d74ac4eb04317d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187028 Malicious code in fornax-castor-saturnology-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48e2d13718c7794049c943f0ed36bebb078dbe4020cdf2819ec9c778bf684e9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189593 Malicious code in spawn-auth0-less-loader-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc25a73cc5479fe146b6fed80fce8cc9fc8210553b59fb2f3c2743c5d58a92ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186102 Malicious code in chalk-resonance-triton-mineralogy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bf63178531eb1e18ec7be76ee8d7757e6690fecc2d546232fa954284ad7bee6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185432 Malicious code in alpha-deserialize-book-upsilon-pi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f5a39be23ad3b4541742c950750bed375767d1cb58d4a9ace32946e02687e56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185362 Malicious code in ablation-rigel-phoenix-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4722a4aa3a2d3eabaa640988d1bb56407667f8dce22d649488a5c01657467d86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190411 Malicious code in xo-phylogenetics-kastra-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 776f14ccb8c890a6430c25774d01ecc7a4242eb45e1aa8e6b3770b0f3a7f088a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187419 Malicious code in ichnology-archaeogenetics-repository-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d427b21d1e1c3f178b62ed1bf3f46c5e28790ff762162804d7d4a5e0be1a2757 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187469 Malicious code in info-user-wind-book-sanitize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d4dc5a534fea20aed19a4422309665c2027ecc15737ec3222b93f3a598ec91f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188153 Malicious code in mutation-dotenv-leda-crust (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86e570963bb062fbe8ee0fcd2d824c2439b265e90e824a4f45dbfd0dc83ee61f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bundle-static-pipe-mu-float (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f641f6aa0764215f73a963c56b013c9e4bfd8f7faf47e0b43a01931c03383404 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...