MAL-2025-187302 Malicious code in heka-buffer-holography-subduction (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05d43fa721efe3264cc084cffea7aa55b2acc8a7e66e03ccdccfd836abdd2771 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185814 Malicious code in biohacking-hexo-nebula-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 799bd86e632988c28863335fcedc47e5fe32a6ec91385c1a1eb92d971ee62381 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189669 Malicious code in stop-auth-epigenetics-neutronstar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d97778258cae0aa68e642d04d7a813ecbb7fe5274fe3d46b749e45ffebf87170 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189680 Malicious code in stratosphere-speleology-rollup-plugin-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0070903b281cd33d856ab30b6eb2f06f5f37806f5672eae32b0dbe0e003d1158 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187336 Malicious code in hercules-fermion-hyperion-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 732d75f6cb499379b6843ff19e5384bb058ca83c8c3c88845de8f273a8505aa2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188290 Malicious code in nightwatch-nashira-wavefunction-perturbation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6c4b64c33f7412381a1d500dcafadddadb2f2c59a0d9bf14721c9e7e3ff107f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189863 Malicious code in terraforming-nebula-cordelia-virtualreality (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c189c82723ce5a436c8482e4184626a3def10827f7f0f3bd4cb2a84f806b4040 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187405 Malicious code in hydrogeology-chariklo-pulsar-mini-css-extract-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d514e86e9a193b5e01631ae67c92d3d0e92c33b1e9cb062f76dee9edaf4a7576 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185566 Malicious code in array-benchmark-socket-dog-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b4891ee261ab5b0892b7fb36fbaf17e875b3fb4eff45655048e9333c041a850 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in barnard-soap-gravitationalwave-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99fb6bb311abe39715f83590bf71d33b3e1f29c30ebcd134a8d514362a9b9313 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitizen-singularitarianism-framework-wavefunction (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8b3787db0e3080dc4c7cf8ed44e346fae5522edb2e0c52bb3534a8686af71b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in postcss-babel-centauri-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 304c683267f7b701dbc99741dfd9571f4f23ae6cc76d8c453977e8cf968040fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pavo-xenon-markdownlint-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b73f8ab6723aec7e50b5b9f873fb31ab31825f1fdaa756acdefbadc5f96ca02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gemini-ionosphere-superposition-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d9915da48474b9a7fc365caff832585a7c79e69a676a479e6add1449dbf3314 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in authorize-node-slow-stub-daemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f973329e078b3e9f8e2be2ad30ec9f232ae6fd7f0187ddad996be506c8c2fb93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188173 Malicious code in nashira-winston-aurora-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9af5c52e6cf6987260607279112d0d054adf72f69bd5cad9cc62fec8cf109c67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186615 Malicious code in dotenv-parse-variables-astrobiology-readable-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 465b6023a0ca0bca6df82d4e7fea4d734021c77c8d00b4a7e90ddac9a6e59305 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187245 Malicious code in grus-pipe-websockets-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e908ab5a9f1588062bc9ccd9e3447dc656308f6a5f76ad9232116d8165cebad8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189119 Malicious code in refactor-file-sed-class-wind (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20c5eb868bd7654b174c4709e96039eb8842f7d6311d2899f566d23882c27941 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186841 Malicious code in eslint-plugin-commitlint-config-angular-terser-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 844532ffb61dedf116bb671dd0cb7a8e6ee68b4d6e7b7a3137265a273e7fca38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...