MAL-2025-186634 Malicious code in double-grid-resolve-data-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec84b8cf5799e8ac659af511e2e198a7e75ad80f432bb110d8f87a68bdef0b35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188221 Malicious code in neptune-ini-apex-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37b63ab4631ab55ea26f71c7b50ce32dc848123780edb2d0f6b35e671c557b81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190178 Malicious code in void-exoplanet-ganymede-geodynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c9a2c790225f2e208964e0a25bd71c0f64b5307be9ad53a6361c7098f046d5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188579 Malicious code in passport-pino-library-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7dfd1dca0c0311db7a37091bd349a0f55ebe17608d41fa2a8f2117a71407312 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188305 Malicious code in node-config-cross-env-event-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 633ba8b5bb0c1b25a73b775f05ef07535394081a99d38ca2eb989da5e9df22fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187664 Malicious code in kardashevscale-dotenv-safe-callisto-quasarjet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00dd6daf056c12587f78cd4d25b3ea2e9fdc19b90912211f667dda8a247dbd73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185596 Malicious code in astrochemistry-planckscale-levels-singularitarianism (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d09eaada391f12d930144df90244194a3d73586bebf0dca02fb04568762e1e1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188811 Malicious code in prettier-stylelint-got-cosmos-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 191ad1021c21de2e4d2aff52918a87b8c01692e87e5d7d02fa1dd71a2f77ed88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190066 Malicious code in unuk-gatsby-dysonswarm-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f84f98dd91a2ce134aab93b6d61ef65104da91ef0514bfa2d9358081ca7f0ac1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189468 Malicious code in shell-class-encrypt-info-zeta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e40f5a80a4c02a821298a0f6020758be052096be3e880026d550837ed3e387d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187738 Malicious code in leda-pegasus-magnetosphere-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 320e44886a156614cb8756afb54e4075fc58ed6bebbdd91f2cfd702bf93dd0d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185402 Malicious code in air-minify-load-secure-encode (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1af3ec54197cb7da3f25eb9bd335126dffc771d242e1a8159a7354d5522b5442 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187933 Malicious code in markdown-pdf-jsonp-brane-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f0417489b7dc888c7fc76f992a2402c4898362ade16a1783e26a8ac2de36a5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186525 Malicious code in delphinus-ganymede-sadr-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bd9091fc6ac414ec5489f2792c694a2abc49dc516b02b637f49f5f797997770 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187418 Malicious code in hyperion-terraforming-cli-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 139f22bb319881877ea250018776f20d2290205a8ea094dd1c1fc3e84dc1083a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188573 Malicious code in passport-auth0-levels-biomimicry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b0bee65acdf68a6737b8995d1143686b1ef9027fdabf5ae14fdd070cbbf7242 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186847 Malicious code in eslint-plugin-ophiuchus-pino-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72910fde647545178f4ccecb0cd7f8485357f83fd546d2c8329012ecdc9f34e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187350 Malicious code in hexo-boson-charon-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a56cd66ea725cf1761fe3250a133dfda961733f0870f716905609eae11f5f91d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188288 Malicious code in nightwatch-levels-lepton-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6bc901157dba2a0f11bcf68e5429ef2be6851012441f8d6b91565d140110d93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189987 Malicious code in transport-semantic-release-cressida-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ad2ed4999afb8ac268ab70d6a37553264610fe139c6861aa22966b3183792fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...