MAL-2025-186131 Malicious code in charon-stream-fornax-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa4cf23b8f66359c49b529a6491ed2854491a148dd0446c95f06774ae3374ec9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187168 Malicious code in geomorphology-cressida-sync-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11711063a044e5d7e1bc0cfa7de9648f003912b46d0a0be5861aae49d90d7d8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189374 Malicious code in schema-dependencies-paleoanthropology-xenos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a5aa35035cef2c1cc6c6bdb74528d86c9297519b890f65258d575cbc34a28f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189103 Malicious code in redgiant-nightwatch-filament-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ed00d409000e536d8b0c2ac90de69f26c89dd68b20849ea28301e0b7896a5aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188571 Malicious code in parsec-pulsar-areology-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e83728336db821db8e3edfea191f300647358c704dd0e05a3ef3a4999fadefbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186514 Malicious code in deimos-concurrently-outercore-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ffa621761675fd2e3ec7b468f01d71eee4ac950beb2e51f7e89d5533a0a6b4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187232 Malicious code in grid-mu-cloud-signal-cat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cdea576c0cd2686520489649051a2de7c88148b728550acd1d2f5516422c9f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187429 Malicious code in ignite-puppeteer-procyon-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 942ca35b8c2f4e4e8dc8c86ec24036c42d8ce46b186eda56cebb6b25eb2c0388 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187275 Malicious code in hapi-dynamo-archaeoastronomy-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54da22c800be5c89bf0fdeb32b9a7a594ca11b7090f7e046112643b481591db4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188849 Malicious code in procyon-slidev-process-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebe7f5587bc3c5a7bbe672d92c0b642e55fdc99413d08dd5e583811cdfc8474b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185778 Malicious code in benchmark-view-mu-cat-virtualize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fc47cd19dd87e3112e036bad1f9a2d225fe3502c682b923334313c3239d36e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188596 Malicious code in pegasus-kinetic-betelgeuse-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1eeb701dbb42b94c86f002ac002aff1581d8e3f416669abce192f22f0f377d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187311 Malicious code in heliophysics-aurora-lint-staged-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3146d8b6e52b168ae00047b32f06d4bcb6748de549b64b41b2bfb73c6bd4abd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188969 Malicious code in pulsar-exoplanetology-archaeoastronomy-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caac07e1bf5c1b94c910df20a6ccb7007eb0d404de098553e2b1ff4fa1258e44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187499 Malicious code in integer-kappa-sigma-double-view (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf5566ba2f350927d21b27f4360f63f302e2bc7d0db732981ccd4b04a114ae2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187904 Malicious code in magellan-hyperion-gridsome-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02a5df34c1f19de7677a58006bccb59e510052f7e8102d6f117af9856b778f23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190191 Malicious code in vuepress-mineralogy-aldebaran-taphonomy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a174c9530c0b8fe98c44cdccf1bfa383d150ed11c2a1dec533c5293ae03557d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187191 Malicious code in good-cluster-gamma-fast-finally (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1809c61c48e5efc4e86410252b50b463dd464fa14ffc6adba5f448f3e74756d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185383 Malicious code in achernar-zenith-ultra-joviology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b10086bc1fa64586a64925f5ec4a2a3c346bd5e465318b0be544bd740ae44344 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187271 Malicious code in halley-subduction-zephyr-paleoclimatology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be6a4751fde16eaa87009873625b6b28179216a0bde52389669c39c7f0ee0d36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...