MAL-2025-187991 Malicious code in mesosphere-kinetic-ignite-tectonic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20b5b6d11a7de70ebf25c858d96c58eb3b08a382c9a7864827f96f9a791eed7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188577 Malicious code in passport-magnetosphere-sociobiology-ichnology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d6a1b5f77b1e31f60a428ea2753d7840a8976284d049afb13d7ce18c39a933f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188880 Malicious code in prosthetics-local-canopus-uranology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3efdeea658b4d30cc033636cd337b88a3295df0119643f737b4b8fed468c07b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189928 Malicious code in throw-omega-catch-hot-sanitize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5660c7de16bc52821723bdfd1087c32d214e18bd66d23f006a40f55180fedacd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190154 Malicious code in virgo-arcturus-hydra-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3200001e1e1fc337325316bb47953dad6b0ac3394eacacf5aa17ccdaacf52315 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189644 Malicious code in standard-barnard-quark-yildun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfbd258c142b9ebcf8b870396a7d74e39478ce8b2493de8dba369ed190dab838 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189857 Malicious code in telesto-redis-ophiuchus-radioastronomy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd255c82666656e5ebb6489494556acba1451caf6565cb1bf4c48216738e7c58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188722 Malicious code in pipe-orogeny-await-kaus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2382b0c000b2e4514194f19d8259b7e578360d10c1531f70c0f8429921ac3b9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186679 Malicious code in eclipse-levels-lynx-nanotechnology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e16a598e256c596a0ce072b0c9bc1946d67911157b58b0ad8cad82e607360b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188766 Malicious code in polaris-playwright-optimize-css-assets-webpack-plugin-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0153c2925946fa33f509a7dc20a6a22715963f52da756ce161ceb18165fd23d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187892 Malicious code in lyra-nebula-node-config-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71da1d08ee103264b969b081db8fc81219689df4fcc9605329c81bbdd888fe5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187166 Malicious code in geodynamo-ursa-coronalmassejection-elara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8f67be9f3617c167c0f4dea03f61b4726cc7c8239375a37bf6a104dd60d95e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188474 Malicious code in orchestrate-process-cache-data-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7471b0298fc61ae4c462894f9c3877691c475883df2c72ebf084c57d16654a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188227 Malicious code in neptune-slidev-pulsar-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1799733a7d342bee25bf57ffb1e4dd7b9fc468ef2728d5aae7943edc1a9bb58c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187921 Malicious code in mantle-private-mineralogy-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7a10c0e697099de5b3529186316ba2c99a82df570459a1161bb7f18e5ecc9f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188526 Malicious code in paleomagnetism-levels-rocket-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac6239ea4745b7e2cbf904de78f70e9f3f56989717525f63879e5b541bc276dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188558 Malicious code in parcel-non-blocking-bulma-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e29c535824f02cdf2ded03b6607107858174dfee16f23bccfe9006e08b3903b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187326 Malicious code in helmet-radiant-babel-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 917d34c5edb13f7f1a328cb3d85f53c5847464cdbbc48039cda029b4fdde352f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190069 Malicious code in unuk-mui-antares-neuromorphic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f1ec361b50b97c7e7b7ab5f49059900ab7878e6ffac9899246ded9fccc19d11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186155 Malicious code in cladistics-geochemistry-vortex-panspermia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 654f488b9a4c4d95d757783d5812652e68474653dd0247b093552f6bf7e660e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...