MAL-2025-186537 Malicious code in dendrochronology-colors-cosmos-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5c58b497bfa810639e7f04a95d1dfdce0066084759d6a3d71419afa81f4dd6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185599 Malicious code in astroinformatics-accretion-dysonswarm-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebf69323bf479cc5874cafcc0077c2229dd31319e197f5222ed445892ce4d910 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185680 Malicious code in authorize-sigma-stub-sun-mock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed8c3397aa59882b18e60095164e3b6528b0a3fb72ccffc1c78c94820395fdb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186414 Malicious code in css-loader-castor-supervisor-elara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 193b52bbac9dd8c437627cdd8702135559f279b67db8494364cbc1d7a07bfec9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187922 Malicious code in markdown-cors-janus-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ab8745a2c08a63be222f6fec9a081416e65831afc979c6869d1f90457518dff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185582 Malicious code in asthenosphere-dotenv-darkmatter-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c69657448b3b6a02182e970bfbecadf73fe036e1a80d496d9efe2ead57291f4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185368 Malicious code in abstract-mu-kappa-authenticate-decode (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d08399beef713d804598e044cce8cba325e7407564b93be665a8a65372e6fe1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185586 Malicious code in astro-ignite-scripts-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bba3a708c5a453f96034e7c4d3cf4270b696d5f709ddbdde132492bc811cfcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188203 Malicious code in nebula-fomalhaut-auriga-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7100d241d71061cfad199022166d5a46f9a2ac290b4e0fa6b68327aecdd9f1c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186518 Malicious code in deimos-phoenix-impulse-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbbfcd766b1ca1c62a132b5ea15ea096166acfd3fa7ec76d70d8f3145d6f817a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189262 Malicious code in rocket-package-sass-loader-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d67124e33ba64b1c42f833fc39b6ff0beafc787ffff39c5b660e68a4b0a509dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187632 Malicious code in juno-areology-dorado-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c5dc9081536cb40daf4c65e7faf0f892689726670e29ce501cc77d9bfb21158 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187732 Malicious code in leda-gemini-saturnology-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6f5b569b71df46bf686285180ffd3ef0e011173804742d78524bd68db8bc38c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189855 Malicious code in telesto-prettier-stylelint-cors-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86ce08ab6aec4e2e81051f6c0e17b0f3597b89496a46adb738908674ed45ebca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188842 Malicious code in procyon-cosmos-mutation-pyxis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b5dcd12fa5035265d7d32f99a552f3818f4eb9981fd531d05e5b06531dddd17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masolv-avlo-cobabsvov (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 054d6849ef0d6973da1d7421700ce87d5d14ec6e9eb83c55a4efd9f472c0b701 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unise-kit-bograttipda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8992c24471b013c309218af3a24dda0509345d27707497ca3d7302c37e89045 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-at-labieagyeyabbjpeka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 878430a00e3f60cc949230c90fef37d29749cc10bed468bc677917b7534cddd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-rsgustet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 544c78325a060ad3c3a1a02da609c4db2b053cd0692c8447ff70df3a4c417e41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in asta-alikif-dakilam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c95fadb778c69a62261edab22d317781495743f67a37080052b636108b466ff8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...