MAL-2025-185906 Malicious code in brane-halley-solarnebula-stratosphere (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dbe993ab0d2060aad81f817e0d23ae578985071a1a988c2fa1c1cd10c224534 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190332 Malicious code in winston-html-webpack-plugin-hologram-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a9afe8f4ab2829ba5b5196f1795f383340927d445f5df8c4dafeb0d41be9b8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186281 Malicious code in config-xml-sirius-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a58415b6cbe6528432cf6e1e8cd55074b566f71bef9a5cda12bcd5ebc971b522 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186617 Malicious code in dotenv-parse-variables-heliophysics-wasat-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f18f0da4eb19316997c90d96ccdcd3fdbbc492bb805db52cc447d51631bb5ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190273 Malicious code in webdriver-mocha-isostasy-arcturus-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d2f393ecb95e8e9f5f3425763254c5601275e09c6da401d019ce63fa0756169 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187454 Malicious code in index-short-java-phi-virtualize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40e263ba680a09fbfa7fa23f8bee80092a3b81959c15f1cd633d5a32f174fd41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186186 Malicious code in cluster-sirius-promise-neutrino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 246366ab6b3632e7b423af9e451968b2bf746434d27260f7b68ffa2a924009ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186169 Malicious code in cli-protractor-sqlite-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 190c6c3483bc31b868e8ea21008cfb3be634df9fe8e3d9179835190e130730f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190045 Malicious code in umbriel-gulp-sqlite-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a191c64e27e6c7846f4fb786da99ba6ab75ab274a4df6b2b6334a001d7cd9cbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189765 Malicious code in supernova-eridanus-radiant-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ee3338ad4519b8b64d9dfca4fe1ba0f2248713067c8006e90c89bfa27497b55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187167 Malicious code in geomorphology-astrochemistry-alphard-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 206b849dc5689a7e5c43f5c73d619dc09d9bd8248ad29e5e4a9c7beb15c96102 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188940 Malicious code in public-mechatronics-polaris-seismology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 716464a4c535cdead2933258ca6f1d745693f5efced69bb34dec1ce417342f63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186919 Malicious code in exosphere-troposphere-grus-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a938b8d5f2c06771aa4f407892665e96dfd1f65f2a61835af1bc190e090aac6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185541 Malicious code in arcturus-centauri-iota-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b062fbcc4e77a805c34328bb8e4095c779c20a7fe585cf258b619b7029d33cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187812 Malicious code in lint-staged-gemini-aquarius-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5fc40fa5df9bcceec113021575335b079fa5851a7bb404c582e9c8ace2a5b31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188870 Malicious code in prompts-flare-celeste-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63b9d41dc415d07ac9a8656e3895a099dc4d7424b7a34ab8503ea5573f770548 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185623 Malicious code in async-kastra-archaeoastronomy-exobiology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7e414eb0afdd76c0390d3282431a6f56f9f3e4a0fbe0d9e603e669ee3c4c905 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187265 Malicious code in halley-blueshift-sagitta-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c1c5d6bfc2336eb699ded75fe930e0258ccd2156247cc13cfc2dc4064e9612d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188503 Malicious code in paleobotany-warp-less-uranology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e503cf1f4b68ac4105f21495630d3b3ab9fa830d3e32df743899bc45a7467430 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187952 Malicious code in mdx-development-elara-stratosphere (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcc4bd235720b3f28d193fb963d4a38119a58061d2fb460cd83c464444e31b27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...