MAL-2025-186530 Malicious code in delphinus-tool-sync-geckodriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 309471f78b1f61e3fba41e092a36d4ae761dc2439a6686d82cea711c93a982ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189441 Malicious code in semantic-ui-redis-dendrochronology-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8d86fe46479392a59ae1b6014000b1675286c6ae85a50c9f04470b1d5626df6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186178 Malicious code in cluster-concurrently-wolf-astrometry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a5d90621c5bb537bc01ee7d14ec63f964ea166320b8b97d2deb75307c0650b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188445 Malicious code in ophiuchus-vuetify-schema-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d9884ad3402f26f5a8382505851349e77b9da40d9ab72fdef1d8653e7a5ac4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188542 Malicious code in palynology-semantic-release-pulsar-wormhole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34206c99211389792c4d934032f76e4292094dac40215fc8bc1353575dcefef7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187657 Malicious code in kappa-eta-theta-sandbox-user (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5274495a6c05031146e800213ab1b1e42dc632a5fe4124ecf87ff927338127a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189710 Malicious code in subduction-middleware-javascript-supernova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7115b54f7e57043e98fb77619781e6bf25031e1d32deee60dd41e1798635fdb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188821 Malicious code in primatology-technosignature-magnetosphere-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eeb9ab28fb0d25c1d31157674fadc3130df8137ade8adb06630447d3c3639e54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186893 Malicious code in exec-virtualreality-wolf-paleoecology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb522e4144e64b1723fb48ee04de4216c3ae57a7bfecf7b921366d8b3bd5bc2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187828 Malicious code in load-fire-balance-try-old (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ed8bd45f714ed76dc28e104d80484f6275477e646f6d793386b90377bb12749 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187013 Malicious code in forever-npm-sociobiology-cassini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31bb78e35d24b0fa1bfe7a8602f0e3fead824e43b871312d412e456b2f7329ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190308 Malicious code in weywot-wezen-bootes-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95af838a5409ad46c803f49911e5142c4505a584392775561fc0e5b1eb266f01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188270 Malicious code in nextjs-stratigraphy-stratigraphy-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b63188f2e4cde710478e23f743034e0ab25624c739497c27f75dbc61212b5db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in boson-hugo-cosmology-mineralogy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40ddae6a0edcc1d9e0d70fd39387a1813de9df1c9e7efd7d318e9063a99699ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190443 Malicious code in yonder-xerxes-xanthus-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccc40dbe9bcc12d0ac9abb79a3fb1a96f75e26103edb32a6aaaee1c4f3592572 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190130 Malicious code in vega-commitlint-prosthetics-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dd5c39fe3aa4ba188aca38f7019952a1e2654a7b513aa87f542447a21b0cd72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188938 Malicious code in public-gacrux-jsonp-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7177770d01679691e54cf89dd9dd30351bb2201f3cc0b6e84da2a7becc65a3a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190463 Malicious code in zephyr-ganymede-fomalhaut-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 400d2c278a0302d618f65ae002e9c82387d30f08742bf4fd5af0b01c9082a40f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186773 Malicious code in envconfig-fornax-void-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1239ea3b31415a82c90cd5302c82bcada5a25101219fb703c24e45ba2738c305 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185913 Malicious code in browserify-cosmiconfig-testcafe-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfff5428f531d2e4567d0a397bb6f4305ee3665f448b346444bc1f04b258b597 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...