MAL-2025-188731 Malicious code in planckscale-ora-envconfig-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb106b457d5f917ba8c7114dbb5f21f91e8bfd4bc12332d92ae52143d6d392e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189311 Malicious code in sagitta-child-process-subscription-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a9e4f79fd0c3aeb2ec025b492be6595c46a1ebd399bded942c4524796255bcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189966 Malicious code in transform-galaxy-writable-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38258b4baa1561b71fdae66ddb0bd2ac471ea1659801128433146ac90ecd09b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189924 Malicious code in throw-async-object-public-integer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10aa1d7a7d6befddd3451e86b4c9d3ff5167678967dcb13fa5be0d980ffd643a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186315 Malicious code in coronalmassejection-terser-zooarchaeology-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f17a3906bd4a11e984c0df47d8cc68a8a7f61cd950e0a6de37029a1ce951b7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186769 Malicious code in enum-report-char-rho-alpha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75fe47f9adba20f092284e704a6a5619427390e0fff83d48dab8122cbd9ecac6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189779 Malicious code in supervisor-cosmicsilence-kardashevscale-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9573fa09b793a27dc60d132b1c9ae19d3c0b44531783b2302554c24bfa8ed91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186186 Malicious code in cluster-sirius-promise-neutrino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 246366ab6b3632e7b423af9e451968b2bf746434d27260f7b68ffa2a924009ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186887 Malicious code in exec-local-mongoose-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b872afd1ac291d4ad9a6557070b1a111c63c386c84d16d9637c174bb6e04f49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188748 Malicious code in plutology-alphard-achernar-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61ded5371ce063b72e4c9cc847308fb09fe72a73590cb02d665c094241045f41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189992 Malicious code in tree-function-kappa-decrypt-assert (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cacb380e1ce93ad7d45f252a5f9858b2a29a47775e53ec4c03d4779cadce49d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185697 Malicious code in await-mesosphere-meissa-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b34101e61927586d02c2c662fce1eff112c80ee71cd05aecf02621788752976 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187878 Malicious code in luna-local-optimize-css-assets-webpack-plugin-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e847d8f1a4f1accf31e663a3733141c1756c144a9aecf4cbdaf064c7371b951 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186732 Malicious code in enceladus-got-ultra-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32239f7dbc5399708cd1356919a8314d11782fff280d08afb68b2a936bd12671 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189910 Malicious code in thermochronology-metabolomics-semantic-ui-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a1243c209c98ea50c04f08cb1b6e855051161fd538e7e33c30d9f5def76b680 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186651 Malicious code in duplex-version-polaris-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 473d20a9e34bd0d8b61bff859c9548289744b91ff9d50156cf77a4aeff126ada This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186092 Malicious code in chakra-ui-standard-nuxtjs-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28f5ca26a44393743791efd17f14d5b2b239b24b5d47394508e5eefb82108c0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188632 Malicious code in perseus-selenium-lepton-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9bfc1cfbb199ea1ca3bb90c697618a7d74ab51f4a88a59c1319771b74755a06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187504 Malicious code in integer-simulate-mu-class-permission (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2d1e3e6d31b5281338a503320c403e664e5c502d3f9b3f3bbb4a6938938b2b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188503 Malicious code in paleobotany-warp-less-uranology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e503cf1f4b68ac4105f21495630d3b3ab9fa830d3e32df743899bc45a7467430 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...