MAL-2025-185607 Malicious code in astrophysics-extremophile-library-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf10cbf40031ebfaa532db3444c9428c5e03586a9488e2adf2fbc812a3d7f4bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187965 Malicious code in meissa-avior-singularity-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56058434ea05e4b11404bc54a0e547c0c81bb85ca6ce5d07d2906dfdcad9beb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186571 Malicious code in despina-winston-query-higgs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 362b8b18f444cbd8cc2912c6a22a8f1e5f7ee815915e3b8ba8919a2bf176e561 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188153 Malicious code in mutation-dotenv-leda-crust (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86e570963bb062fbe8ee0fcd2d824c2439b265e90e824a4f45dbfd0dc83ee61f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187794 Malicious code in link-sadr-helios-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b26e562ea8107d28edfaaf8d5a3dd188d46f23693a0daaa8dd5f8785b7ac4cb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185870 Malicious code in book-compile-try-fork-kernel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67a01f18be29f47da8cd809438024dbf979163557d280bbba71baa379a1becc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188999 Malicious code in quantum-computing-server-phenomic-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e4eaeb6ca6f3e7e8583b6325db4dc2405956f5cf99b5fea3fa0a71ec3990d93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189560 Malicious code in soap-weywot-robotics-on (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0dd944d0f7180206b81a90a1e92b2a37af02b64eb858ac325abe0b694b3bb26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188348 Malicious code in notify-simple-theta-monitor-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b423312ee55eae4b343bff813661d5a36f603668689ee6635047c8f5c07cf34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186041 Malicious code in celeste-archaeoastronomy-despina-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8c86b174fa7f441665264408c849b5a246c6da4cd40a9e62d57bbf70b68a32a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185610 Malicious code in astrophysics-triton-nightwatch-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 024882eb95974395384f723bf94e85f20340a0c83bb457d8fbd3e4576f104b7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185975 Malicious code in callback-fomalhaut-slidev-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6530e7d524ba18030b212aec51ecb2bc02efc16da675b6d3b84232396518dcf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188983 Malicious code in puppeteer-prettier-stylelint-cluster-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edfccd5cbec553bf6d263e710fcbad1bfc8232a17e489b57cea10c4d4c137775 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189386 Malicious code in scripts-geckodriver-jwt-draco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bd17df12578fee8db8e79d891c6bd598247c1228ad1b274e4584993fc2927c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188340 Malicious code in non-blocking-miranda-gridsome-cosmicray (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78ded373441292494a43935f760ffc243265ed07283b7797b8afa7f81f2530e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189604 Malicious code in spectron-commitizen-server-jwt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f5520a0221162a9daff8f9fc7fd1859cb9e5017d1fa3d3de33024e017fc173a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185972 Malicious code in cache-xml-stub-fire-nu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a2eb0e7fa0e94ac62c34a36f3df12ad663540f26fd5d5989d0e3c8dbfffc90b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186799 Malicious code in equinox-passport-janus-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3f11b68e3638d03fabface74d4eade1bc5f8df93eab7c0a224d47b29af1d9d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185557 Malicious code in ariel-backend-css-loader-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8985f6f4b26a752bfd23a32fbbf39c2aab5c6b48f599eb0f46f6398a6833b115 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189186 Malicious code in repository-heka-nestjs-mesosphere (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 280a9a067b4d3a3569af0705929db53acb6d1cabc8a723c0f0e6fbe9a4024fb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...