MAL-2025-186243 Malicious code in commitizen-radioastronomy-steganography-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4570637a2fc26f6065d9a514ce97d5a5427454e1864df6aeeea4fd1563720406 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190261 Malicious code in webdriver-manager-ethology-kastra-biotechnology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4d50f3fa880cc105429f154e2bc09e5b09429538db303307688c9609ca30e2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187293 Malicious code in hawkingradiation-jupiter-morgan-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bec805e2509a0ad2d0b56982f75be5e9577f71ed213846605475b8cfc1064bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186375 Malicious code in cron-rho-analyze-socket-air (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3ccfff0cb2760978774c62072d2c40b1b8f36364183047d5546f5c67d0fa50b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187905 Malicious code in magellan-neptunology-extremophile-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 253a620c17f19c1814d5c8fd8bf86e3437e5d6da93e3ab045fc1422e186796cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185771 Malicious code in bellatrix-panspermia-websockets-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 915341c96b286908734e85176bd715f1dfd72315e39061cda0bc575fdeed03ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uninstall-semantic-ui-await-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d54cdc877af56ca1cfb7dbad3c96a744be26cd760c76bbef5ee6ca64e03bc210 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187971 Malicious code in meissa-markdown-iota-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbfac5256294b4858c1b93f7aa1f371d7a3507cae5cee54e35fa90d09c910e7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in node-config-callisto-comet-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b5635651be491b5fb17da64d0134d450bb553bf6c11fca9bc7157a5541ba26b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187584 Malicious code in janus-rocket-crust-xerxes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57d68df4dd0ef3941fc01f5427a525386ddef1adb2f0de27c41bda77a6971c9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nanotechnology-seismology-dotenv-parse-variables-darkenergy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7281d4ea4b4a674c44eb06ed7bbace36a580718444923d80db828d3aabbb64b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189832 Malicious code in taurus-webdriverio-helios-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af5e60879dae39c4dc26ef0acfb0ae266ca696401551bb9c57132080c93b8a10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189861 Malicious code in terraforming-astro-virgo-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a183fa87002850d00bdd17934b7cf22fb2ada6f42a83f55d806e8be99a42534 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185488 Malicious code in apex-charon-lyra-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2380231731ee57186dd0778a11368610525cd117a8a8fbc49df9cd823e3f3d8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189951 Malicious code in toml-superflare-rollup-algol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2095f2a643f3176f7194ca9b7fb58c358babba6c0b9e2607bb10894b52696ec0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190187 Malicious code in vortex-husky-sqlite-exobiology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90045f94e1d9d66252d467fa18357ac19aac151e5ea708173e4ac15adc8779ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in less-antimatter-slides-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 977610f1e6c543929e89576e9ad15e37e573ef47a03271559a2b4e72c9d549d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185804 Malicious code in big-star-kappa-alert-report (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 277bfd448c229fdf8fe8efaef8c464ce08c287881a335bccea1a5f1dfa93ac74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189108 Malicious code in redis-corvus-transform-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53578cb8707c6a8f4d8cf11e99a8d46d4bb1ee0c918484fb2167d78b26b8b3b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189842 Malicious code in tectonic-nightmare-archaeoastronomy-inflation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b79663f9084d9c421e64bde50d860585f18939f7dd9702b06425287e50b292e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...