MAL-2025-186317 Malicious code in cors-google-mocha-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d114af8d971cfd46a6d164d73ff566fcc20fb9de50a635c47f8b650efeadcb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187035 Malicious code in fornax-phoebe-jabbah-xo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89ab6a4c8a169e333e9defa80910133b4b619a071f3e744ce182a3d24ec5ef6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185789 Malicious code in betelgeuse-csrf-aldebaran-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adc4d06a9a2a5838b3cfab17e7d8abdd29e52f75c1327cdb199e805a5a420465 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189996 Malicious code in tree-validate-info-signal-abstract (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 698999b4d894fec9e7aeed2c3d4cfa851ccefeb92457f45e03cf92331e29f7d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186666 Malicious code in earth-small-scale-simulate-static (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49fb4a6ae7bf4b0905de3d73d4d9b8c46faf60e8c2e993b8f02590be8e6893e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185378 Malicious code in accretion-kastra-nightmare-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e97e293861df5ff3ff1aff45ed36a2f258e7725f0c175f8fe5ecd58ecce2f20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188286 Malicious code in nightwatch-interferometry-meteor-decoherence (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6a6c3541ea78c2ecfb39f3479845e5c39a51d9f757b6e133b00bfbbf73772c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188270 Malicious code in nextjs-stratigraphy-stratigraphy-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b63188f2e4cde710478e23f743034e0ab25624c739497c27f75dbc61212b5db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189152 Malicious code in relay-dagda-sync-graviton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70e2fa9140c056d951512eeda4b917c4d77a95617f974d632aeae2f8e5465c86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185518 Malicious code in archaeoastronomy-biosignature-phoebe-metabolomics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae3533df6b043ad28180a290281fdd4efd39807074d439976564c2cd6580cc15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185559 Malicious code in ariel-callisto-commitlint-config-angular-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cdfea94216d46394d4f07bde016b03bdeedf21face4db3ada1a9424b0a6e4aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190458 Malicious code in zenobia-zephyr-dactyl-planetology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b41972a45f6193c0e871bc179bdd7dab9cdffb8574219b66bed2cd9c14afd2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189935 Malicious code in titan-bootstrap-lynx-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e6052c43f9808772f747f45034b0d8b51eecb153991ae94ad357a99ac6a1e7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187712 Malicious code in kuiperbelt-protractor-epigenetics-kardashevscale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63ae2935eb69514bce31e2c9fa57cb60e6fb9ef6dd0a9014bd3a914697b85068 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187479 Malicious code in init-publish-boson-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f1d11d355bbaeea00585411e740d465876d6ac7133d545dd0f863c0df4fcecc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186617 Malicious code in dotenv-parse-variables-heliophysics-wasat-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f18f0da4eb19316997c90d96ccdcd3fdbbc492bb805db52cc447d51631bb5ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188289 Malicious code in nightwatch-loopback-delphinus-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86bd51a45b3ad13b8d4799d005c23c7a3c15863d564a5a40eeff8179e9414fd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186568 Malicious code in despina-lightyear-yakutsk-jwt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9d11c08b20e05e996c180e2416cba94fd964d29b9e6d37754e2bba18b905e5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187313 Malicious code in heliophysics-pino-umbriel-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68d13fa24ea00cdcbb15ac488921f9c6c192ed00f12f1b47d659992b4fd4f4a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190061 Malicious code in unuk-chalk-proxima-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0ce5d6011d2ef1905085d1a8ee431dffae5c2a7086b8c43056a28deeedef0d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...