MAL-2025-187106 Malicious code in ganymede-nestjs-izar-release-it (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a230d94bc32273176374265684eb0eccddbdcba4bbc1819c7f8b868ec0f5e35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188325 Malicious code in nodejs-csrf-sagitta-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55b4a0d0f7ff3dd984df6f9575fd59892f7044b99a492bdad2834ae0362abd51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190005 Malicious code in troposphere-elektra-supernova-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fafea2be1de7264163adeab8c2f4d88c984fdf472b377385bfec282df6b6a8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189545 Malicious code in small-analyze-theta-signal-daemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b4ba72a4e397a3deaa3cbad87c2fedeed49d4e7b21b42d23db36723b016477d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188597 Malicious code in pegasus-mdx-pino-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81b9b25739f729310e407971211ce7a65d98ec3f75743105e9c830595d96b8e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185764 Malicious code in bellatrix-bunyan-neptune-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce65e5c0135f57c3166ec660e1cd8880b62f46a712458d94ef70acb875d1c3db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188019 Malicious code in meteor-cosmochemistry-parsec-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f018f42ff841a03bfe473a2be5b8a5c9547a9ff5fd7162c174cc4bf249906c8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186731 Malicious code in enceladus-eslint-config-readable-cosmogenic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b1fc764b9f62908de5e4c0fab8df232ef0a5c42597b41238b24ebeb00866fdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189366 Malicious code in saturnology-webdriver-mocha-registry-blitz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a5eee96b9423cd54ac4f62a065004d3dac4b3e73c78de4fb77e91972eef1fd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185738 Malicious code in bad-route-boolean-compress-float (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04e16944033f69a50b3ed444de85b5c36b1c0905ef2508cece19342f450cc4d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189129 Malicious code in registry-quark-barnard-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8be35985da5091690aa56f84416af345aa641a6b98c78446a0a03f371a4176d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188709 Malicious code in pino-pretty-technosignature-biomimicry-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d78551abc317c974c87d5054e9be17761bb59010ff189eac4ca579d528d32c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185918 Malicious code in browserify-seismology-vega-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b178840b82a5b2a19a72b4c9d23538f165376341cdb7cafb4139a16d6502add This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189815 Malicious code in tau-float-string-reject-byte (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a0f892c15a0fe0c03ddd87d3d7e78aa84b5bf8f943daefb2a16fe2421b23957 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188324 Malicious code in nodejs-cosmicweb-chakra-ui-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93a5092226cfdaec9107ff680820108c965f38859cd60ac2915fa0552cf83dbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186331 Malicious code in cosmiconfig-perseus-redgiant-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8cabf74a61f50af9ee6fb8098d25d2c08526d5b73a3c74ec59e714ad4cb37b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186009 Malicious code in carpo-release-it-oberon-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2d9a35551f995b8ec1e04118cfd9e74e6be2edf86c3664c5404ddb401ab0918 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189559 Malicious code in soap-wasat-frontend-astroinformatics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 035f9ef7998b394d382afc13f9209220a634c21114f0432767956685d56e9cf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185376 Malicious code in acamar-xenon-eslint-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c66894e71892101c8dd7c29f71d32f135677cd05c77630b1a91fdc89c9a2f1d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189521 Malicious code in sirius-registry-webpack-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c310c475846e8ee5e7c18a1b32e566c7929067fa02791639c37510e9d7820c0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...