MAL-2025-187156 Malicious code in geoarchaeology-sagitta-chalk-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46bc927471dab8293245039be0832db1245124759c8766ad7d47fa4e60f26052 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186943 Malicious code in farout-resolvers-photon-blazar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d346732ae56c4ef8f30df56341cab640ff20f6d532c8da3b5709ae69820d5261 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187022 Malicious code in fork-playwright-joviology-accretion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe5a06ef42fb5690b924816d514ae128fa79405a6dcdba484271ffaa84790c26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188854 Malicious code in promise-carina-astroinformatics-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2014f330645c8ea66f04b127b546ef18c580803da86446ae01e44eb618d71419 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186640 Malicious code in draco-hermes-betelgeuse-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e3e9fa277eb2731d2e5d6b112e3c7dc4fcd0328ded4825757ce1929bf1fad88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188861 Malicious code in promise-jovian-cli-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce7920e2648fd98b014ba6e5691d3aaa8d488968c54a9a951d7f0f09354f62de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188348 Malicious code in notify-simple-theta-monitor-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b423312ee55eae4b343bff813661d5a36f603668689ee6635047c8f5c07cf34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190332 Malicious code in winston-html-webpack-plugin-hologram-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a9afe8f4ab2829ba5b5196f1795f383340927d445f5df8c4dafeb0d41be9b8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189674 Malicious code in stratigraphy-archaeogenetics-pino-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c8b8215edc8d75314fd70706553211c18d60e357ddd2ba33d98c9aebc7bfc32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187385 Malicious code in hugo-miranda-prettier-stylelint-xenon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e2ba474c5aaf42da186212d66893866c1fbe6c58cc6ca0109aa83c82304aba0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187794 Malicious code in link-sadr-helios-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b26e562ea8107d28edfaaf8d5a3dd188d46f23693a0daaa8dd5f8785b7ac4cb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185478 Malicious code in antd-node-sass-zenobia-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1a6abf162f2ff33e0e531ac0bacacc886441b2faaf429aec9919956afcd7939 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185650 Malicious code in auriga-parcel-soap-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbe5b1c35448ad73eef103c3a367ab3cbf211d6af7d8138c9531cad4d079c357 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187628 Malicious code in json-stream-aquarius-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66572cd8192992ce672eff5d89b4844980b864c0c831f139d85634cab429b063 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187881 Malicious code in luna-xanadu-aquarius-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbc41d7b808faaf60c42dff26f6f47331e3bd6a23a51389d3ae2a88c7c0f9c7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188539 Malicious code in paleontology-tailwindcss-tethys-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff9bf7ae090235d58ac50e3f500d0ffbb3709c476bee4ff023db6e4b7af13da0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189581 Malicious code in socketio-webdriver-mocha-kinetic-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 150f89806d0e3db6e1a5a953b3f96457bdd5d51522b9cbbbd9401b3cde6bcc82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188153 Malicious code in mutation-dotenv-leda-crust (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86e570963bb062fbe8ee0fcd2d824c2439b265e90e824a4f45dbfd0dc83ee61f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188840 Malicious code in procyon-aurora-zenith-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ee9d82155772729a89d4891311cc4f51a4cca870e1ed4af8058e7900dfc6f7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185397 Malicious code in aether-start-lepton-mdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e36aedbc551c0fdb6d6a164bc853c5330db99a2f5ebdc2bd7c415435ac4acf66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...