MAL-2025-190342 Malicious code in winston-writable-betelgeuse-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 618dfd248d0e1ba6168342765507ae920fd0ed18ce8cf28a99a494f55683c3de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in browserify-izar-archaeogenetics-darkmatter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7bf87f0fa9cf2004cd9a8d4f12aed50577376be0a09f2da152e72123b8a1b65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neptune-async-karma-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac58492e423291f353f279ee514a101ef97ad2023b70a908cb71091c4390539f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in async-xerxes-filament-outercore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbc6163a409dce77356ebc5ac817d18a41dc29f36100b23bca2dd937c8af4a34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187235 Malicious code in gridsome-interstellarmedium-private-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc35853619fa48c454f34cb715f9e8d0ccd26fc433fd0366423d526d7580bd78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186257 Malicious code in commitlint-slides-octans-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 428a2525ab3ebc8ba2aeeb9ab46f2510a73a7eaff42b15ac0ac0ff63a719d922 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188852 Malicious code in promise-algol-cosmicsilence-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61401dd027e8d1fca9c02b35b4293c1cd561b78ddd98e7088a45ed40565dc0b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189349 Malicious code in sanitize-new-link-code-void (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ea502fe1787665ba66414467f0d22ea7bd53a05d1a42ad35bb8974b5d525531 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185944 Malicious code in bunyan-carina-adonis-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfd90301f6cfca4ba49757fabc76efdf61ea2544c98f1598ccec6338b083fcda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188305 Malicious code in node-config-cross-env-event-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 633ba8b5bb0c1b25a73b775f05ef07535394081a99d38ca2eb989da5e9df22fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188392 Malicious code in octans-prompts-hyperion-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82dfc59630dc6579e771d7439a8c775e0056caae7877235573ac6d2d0277f2dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187364 Malicious code in holography-antares-enif-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc8649af4f582c4122138a6cc2191c5208ae130c40e0a81317dfb3433f22d4eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188272 Malicious code in nextjs-weywot-bioinformatics-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e21c7bbb3589182010dd1d9bcfb88841beb2fc6f908229b0a78e48f24a75fb9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190254 Malicious code in web-container-container-sigma-optimize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76f4e0c5360c2b3e572b5d6ed0ee2e4021c2e71ae32acc87dadea5d19cf8656b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188242 Malicious code in neuromorphic-corvus-rate-limiter-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8d42f67b16998e8372cfb22e1d1e99a0b3b90dff290d898c756114a21cddb5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186952 Malicious code in fermion-thermosphere-hawkingradiation-astrophysics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab3f94d8bd92593a24f0fd0e58ac635815bd45cc2fe9e1bc8f8966b92314a08e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189338 Malicious code in sandbox-hot-cron-query-boolean (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17f43a7ba52f6e7fb74fb6de0210186e218442b2e26082f0f97a0a0b065a03b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189809 Malicious code in tardigrade-indus-baryon-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75f2514afda20ff1f907f552513fb989fb4e0bcb04cdc483a5a11c2b968e60bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in supernova-phylogenetics-terser-abiogenesis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 869b9375b776171d4f47ddce1c89cbe87af6fe96e7a7980e9ae061b7cb416a86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in load-protected-file-index-analyze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a5faade79c2776328e1710a3582b6ad746e9fdb934959e0c3bdca1c6f84b929 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...