MAL-2025-188586 Malicious code in pavo-auth-sedna-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f8d23d3284dfb5d8c816252d592abe31569453c9b4989f3dbf8910826ee9a4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188968 Malicious code in pulsar-dotenv-safe-redis-fermiparadox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9c008e0e78c252ad80dc2cdf02ef146655bf01aa8cc20e278fc2892651e7ded This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187018 Malicious code in fork-eslint-slidev-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14f8ab67ea8427ea5b62140b04dc5a91e4b2512ef31a7be5a7f29ca3f838dfed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189553 Malicious code in soap-comet-adonis-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ba309579742e145eec67128cd1726f352994bbc24340da2452433bad6350725 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186681 Malicious code in eclipse-triton-avior-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e452f33f4d946135197dd190e23dc7ccad92501decc88c03373713cb28a1fcb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187634 Malicious code in juno-ganymede-inquirer-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 463d0aa870f868241b4b5f4ffd22e9771e26f4a29e3ac8258e8c4b564d6c6c3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188991 Malicious code in pyxis-sedna-nebula-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4823bf41ec4a01879644b67982d2191ec56200286016f1e4a400b8bb207c878 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189435 Malicious code in selenology-dione-envconfig-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58446230808fb30c9c6d9ddd433a5054ef4d641b42fc35972fa47ede2fec4431 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187077 Malicious code in futurology-quantum-mysql-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c6a031d73955fc96cbf2c1abde2b595b5a638ce451b56051a15dcee2c81b161 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187805 Malicious code in lint-isostasy-altair-less-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bc7c0466ae5d2579ed1cf9986ae80ed2df907eecbcbaf7eb8edffe3b4ea5d0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189756 Malicious code in superflare-paleoclimatology-pavo-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39d337f363e6d9af72d6c6c58ab9d0b6cff009263226481ce03f76293b809c53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190129 Malicious code in user-route-fast-easy-sigma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7773dddcfb7d81f96523f754ca91e75c1bba334c0c58daaa3e4263791ac88bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185943 Malicious code in bunyan-callback-pipe-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6c6a30fabd9762255234275520307cd432fbd98a02b188eba9e94d2334be6b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188176 Malicious code in native-coronalmassejection-writable-bionics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1beef42edff0c4d0221d6f38cf659eb78dd577fb905abd1606d91630eeb3a3df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186316 Malicious code in cors-centaurus-electron-builder-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector feeccfb1d261c6ca7989d2be6cee1c0b020d5eaa19f8a9d0e008e8d47573304c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189051 Malicious code in quito-process-oscillation-nanotechnology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 305c655f081481854c69983ebaf4ee99e9246b7a2426a3c8e2665cdabb76619f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186327 Malicious code in cosmiconfig-biosignature-vulcan-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29ce7f915509c7a8c88af596b7966e3cc5162e9052c189cca1200adad502a9c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188759 Malicious code in polaris-asteroid-oscillation-australis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b7a8b10557d3b8ac062dec69414470183d5bbe9cf999cfecb684e5dbac74a09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189128 Malicious code in registry-pipe-version-chariklo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb83a59ef222bd5e5aeed91986f77fa69c191bb0dc1819dfd9eb913e08908872 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187709 Malicious code in kronos-pipe-delphinus-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 960c07082250d878b37b3a5f9a803c37008c32b0ac7d9deefdf8bc4284a2bc8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...