MAL-2025-187609 Malicious code in jovian-asteroid-tectonophysics-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb9ecc1569f3eb6c25f454d0d132e550cf8451e776e85bf56a54a04955aaab97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187922 Malicious code in markdown-cors-janus-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ab8745a2c08a63be222f6fec9a081416e65831afc979c6869d1f90457518dff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188272 Malicious code in nextjs-weywot-bioinformatics-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e21c7bbb3589182010dd1d9bcfb88841beb2fc6f908229b0a78e48f24a75fb9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uranology-version-flare-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7590dbda8cfb7c763afc803e54f5eb4d59a9c4a1274d0a54bfd219c15fdcc6f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in supernova-phylogenetics-terser-abiogenesis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 869b9375b776171d4f47ddce1c89cbe87af6fe96e7a7980e9ae061b7cb416a86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in runtime-short-fork-yaml-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31da8d79938c0877172eace97de977d62cd6cef0bdb976f8e1c9a90372aa944f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in optimize-css-assets-webpack-plugin-polaris-docusaurus-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c44a99fabb4e0d5735d6d5ed781d797b9a5c415bb82cacef81f2cc52473301c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in capella-proxima-geomorphology-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a0a503ecbcebc9e7441e12ddf082270bfb761262e5edb8916dc4925b0eaf7fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190342 Malicious code in winston-writable-betelgeuse-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 618dfd248d0e1ba6168342765507ae920fd0ed18ce8cf28a99a494f55683c3de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hugo-capella-janus-nucleosynthesis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c833040778b208833172be98968dc0d98c708a39a399c3fdd27d8c86303fb62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sirius-nuxtjs-genomics-hydrogeology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cc894c78e9b50984595b19e8286f089a9d7ac67d3a4a9c18e378807110f33fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185415 Malicious code in aldebaran-halley-eris-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ea1ee1c5006e870f575cd778508830625614ac4f6ee77b64e52cd1cf8e291c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188242 Malicious code in neuromorphic-corvus-rate-limiter-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8d42f67b16998e8372cfb22e1d1e99a0b3b90dff290d898c756114a21cddb5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190366 Malicious code in xenobiology-materialize-epimetheus-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91bff12111e26834b786d9cace08b98ae630c9ff4cad6ee080efa7afb0328019 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187732 Malicious code in leda-gemini-saturnology-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6f5b569b71df46bf686285180ffd3ef0e011173804742d78524bd68db8bc38c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186537 Malicious code in dendrochronology-colors-cosmos-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5c58b497bfa810639e7f04a95d1dfdce0066084759d6a3d71419afa81f4dd6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186020 Malicious code in castor-callisto-miranda-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 642a0e3b58478b1752d42ebe06e3728a14dd0d553d9e35c2c8bf429b0d2670e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190427 Malicious code in yaml-kappa-integer-uglify-serialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5709120aae91d82f17f9873aabc817934d9aa7a9f1c29aab1be869e515d63feb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185523 Malicious code in archaeogenetics-astrochemistry-quark-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9101bb249512831ae69aebab145195c2c777abc6fba8d572f58c08df4437898b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188852 Malicious code in promise-algol-cosmicsilence-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61401dd027e8d1fca9c02b35b4293c1cd561b78ddd98e7088a45ed40565dc0b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...