MAL-2025-185456 Malicious code in andromeda-impulse-quasarjet-elara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e410a4fcb58b2811102f923002858586bc7bc659b7f0faf932ba2c0a1456af4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190003 Malicious code in triton-subduction-gravitationalwave-sociobiology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d971551672fcbe7254864db12c049fec86d55677240ce555e99d0ab3bbca311e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190379 Malicious code in xenos-lepton-cosmogenic-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bd42edaad102d51c7897f5f9f97d176aabb390e1ccf4beee36af7105a32ec56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185421 Malicious code in aldebaran-regulus-bellatrix-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 466d3ed4652474b926cfb44ab27373bbae126cc4d987b1c672274fad890cded6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187581 Malicious code in janus-remark-thuban-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 570155d095d3eae650688dc844681804d9c1b15d9b0f5ab29768d385d842d4d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190242 Malicious code in water-execute-rain-root-cloud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6de575c2b404267b02a2a3ca2c624486aef9c70fac497b83043375c8c4080eac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188900 Malicious code in protractor-neptunology-less-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f99a560aedc45e4f26911ef2f432de2beb6f35bacf82bea94cedc3949128db3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186472 Malicious code in dagda-ophiuchus-koa-solarnebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d59370b60f2bcbd1ca331ddb9e242a52c610a109777bc6254e561aad327d81e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188242 Malicious code in neuromorphic-corvus-rate-limiter-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8d42f67b16998e8372cfb22e1d1e99a0b3b90dff290d898c756114a21cddb5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190326 Malicious code in wind-quick-char-yaml-thread (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddce2ad9ae1e5a7ff23e318e9d892e2368904076cd87af82d0c6e57a8ee5fd2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189136 Malicious code in regulus-protoplanetarydisk-quito-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68aa10411418a1e9162ef35ed572c716c7be7fd3f732221752c375e50f69b740 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186365 Malicious code in cosmos-yonder-grunt-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05ec61cd9ccaae23473fa62ba89bdc0cd77a1cf4c2ad714655057db11196e10b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186022 Malicious code in castor-ganymede-registry-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfdb99fb904b107d2e5916b03e976fd9934c58aa09d3cc1cf8f64ee21bc92563 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189296 Malicious code in runtime-parse-user-authenticate-runtime (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 164dbfef9ef242d560dd9d9d3dd6fd1c685123e8497af22e16d59bf89ea029dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190178 Malicious code in void-exoplanet-ganymede-geodynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c9a2c790225f2e208964e0a25bd71c0f64b5307be9ad53a6361c7098f046d5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188555 Malicious code in parallax-speleology-cosmicray-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcb1bbd0bd3357091e2d748d5bed61fe8406818a860219badcf71fab198a6f75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189507 Malicious code in singularity-bunyan-eslint-config-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2283510842946d2aa3d0b25e8270ce1e0e52b912769d3adadb85a58493c5e67c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188811 Malicious code in prettier-stylelint-got-cosmos-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 191ad1021c21de2e4d2aff52918a87b8c01692e87e5d7d02fa1dd71a2f77ed88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188456 Malicious code in optimize-proxy-alpha-cache-decompress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40d5ac7627756a64de4a29db4eee74e5ef1658bac2e231d7c74956658e3c4445 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185384 Malicious code in adonis-child-process-pegasus-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3209c8b1de00a411a153a4f8dbe6ad93c7dd53375702b75897914da7bd3baf36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...