MAL-2025-190456 Malicious code in zenobia-sirius-paleoclimatology-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 589c6cde9bd310194e1d28c17c9a76b68d2af512820dc8f14c3bf6068c946525 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187458 Malicious code in indus-farout-carpo-astrobiology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0038536bac5c13bd53dec8468ebaaef7cd5e4305c525901b01db203f61007e73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186354 Malicious code in cosmology-geodynamo-blaze-perturbation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ba766eb5f32777db3374986c46fd236e4668d7897069846749971a67037b8c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187044 Malicious code in framework-bellatrix-await-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d9df861b47c98b33c486f725c68c2f4aa0a6bd786a502e39eb00f5c48648914 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188925 Malicious code in proxy-encode-cache-easy-delta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b71d7168ce33fa33d117ca3dfeb5107315620cdef1a12c36ec833ec3738c04d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186712 Malicious code in element-ui-commitlint-convict-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2449140152499149dd95c33f0f0d29f117d403a9f79b762502ec4458506a0938 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185891 Malicious code in bootstrap-kastra-event-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a2df2510f2f174eab60a7a3916ad6759fd87b80db2bd5c6f9164cf9fcc0be69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186244 Malicious code in commitizen-singularitarianism-framework-wavefunction (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8b3787db0e3080dc4c7cf8ed44e346fae5522edb2e0c52bb3534a8686af71b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185782 Malicious code in beta-key-promise-socket-file (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebad79cce7e400d887bd619f66393a1012518f16bdabeeded43fbc8577048891 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187529 Malicious code in ionosphere-triton-selenium-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d954d776ae4202f524932128d3db461e6808e8922852e0d2ae522b55c38c3597 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189244 Malicious code in rimraf-jupiter-carpo-phylogenetics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52050453f7f9de40e6c1a5726233c5291dc493693fe69bbf213323ee6f4e3e55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185957 Malicious code in byte-nu-monitor-module-static (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16c05abac56c90a4acae81be357b0ebd34e8c1445b5aa04fd003fbcc5a5b8d7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187772 Malicious code in library-archaeoastronomy-winston-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbe3dcb39beccc420438542d11282f21171bd86c34f18ac5d213fcc6caa0eed6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188224 Malicious code in neptune-morgan-pyxis-australis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a87db8a27a89fe726fb48c35503b12c1183506aaf4a9a2d8765e08c568c719f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186456 Malicious code in cz-conventional-changelog-selenium-xanadu-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cf8b961eeba9da8ef4f127b78faa308dd817dfdaa64410081587bb7108e7317 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186290 Malicious code in container-bundle-wind-private-resolve (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7db1e29795f86285de0d3050a91ae132752d5fe260eb95e9a4c113a4d16ed7da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186465 Malicious code in daemon-function-throw-file-dog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5a73e261a4f17a185bcca6a3ab3abc503be436cc2631043966eea2b64c29a97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186122 Malicious code in char-double-load-notify-gamma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71d12118971bd0678f5c5ee873fddbd6b6642589f8c817d45309c0210b7bfdef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188575 Malicious code in passport-deimos-isostasy-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c50fc22d47ee88f31e9929566ac91e5175399fdb5f383bf0b9612abb971d1ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186642 Malicious code in draco-quasarjet-envconfig-technocracy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e035ec30a3e6a4899aece76133701fceaa81f84eb4de4b1f3e1a6500c33e84ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...