MAL-2025-190184 Malicious code in volcanology-yakutsk-phenomic-xo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0839848235920a49046d0f936d90f38b129c54850881f8d90118a76a2f62335 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187318 Malicious code in helios-jekyll-polaris-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 185b2314d9675d6e627b2ef3b7251acbba2ffb5ecf02743553126f3e6cd7e1b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189223 Malicious code in reveal-md-cladistics-brane-blazar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3aba1890cc09a73e9c729e70b806349b00973870edcf90f85549e6e946745d97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186304 Malicious code in cordelia-babel-on-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 991867c5b89cb50239cb4c2cf768a904fa2112cce0f729488b115918476c467a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187514 Malicious code in interstellarmedium-coronalmassejection-hadron-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a445cac5b8c65ed165f968e49394f1d485b9e541be9e0b2c076c6189c278ebb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190009 Malicious code in try-data-signal-cloud-report (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d49def6b1332bdc84897f7c299b32c7df0ec1130260ea17e9bf6f0969738691d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189433 Malicious code in selenium-troposphere-nebula-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b95472989f84ff62f81f6c99b113fbaf6da8a185c95d54c9630b37770ad223cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185578 Malicious code in assert-zeta-visualize-data-char (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bf70c747e8b5236dda3b3cab1f3c6287cc1cca1e6a49f13b239239537aabba5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gemini-fornax-commitlint-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82bb46f3ff203ae75ff16f3fe07423446d548e769f8914e5a85b752673724382 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185851 Malicious code in blaze-antares-taurus-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ad226b864d7c4e73ea785218719e45d19c4ac3acdb0c4d2a3c0530ff2b85350 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188175 Malicious code in native-callback-prettier-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc0dc311373b2931d044adb4e40d0af9e1e9bf640554855144ae6aba8b393488 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188902 Malicious code in protractor-stream-frontend-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0484f67f780b12ef69834da07acf3c1fdf3692c3ebaaf2e4cf41fd024ecdeed3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186366 Malicious code in cressida-cache-iota-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efdc68100f25ab316f603e943cc9672495c31169a3534af578cd94b80cb0b020 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188496 Malicious code in package-zenobia-elektra-geodynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15b0b6d51fb6f3b2c4e9271da9ef0418e408f6a5005898849822bfbf56f5b85f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188373 Malicious code in nuxtjs-hugo-karma-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79556a4b1006c3aa3f897ef9fccba95b8e8d674b5863c91df3f26f4e762b507a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in acamar-comet-flare-robotics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df4fa443fc219b32a649b7258c7128b38d90c7010b81b9625f2459c8b43d2a4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in extremophile-slidev-radioastronomy-coronalmassejection (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caabac9e0f1bd1f9c12cdd709f620e7c1e8d2e0b6ee9f0e3e16f1553227dcede This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in root-user-await-validate-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3eadca940140bd92565e3b06a732c77498e9eb34e843f9bf2a52c4c46a9edac9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in paleontology-acamar-steganography-commitlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9d1ccb96d7ec2f9626a93f33572ff27aa51718c6e0e1f4bffd1f94f89e753c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadron-hyperion-tailwindcss-tectonophysics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 410cbba985bbfb9ca1d7499341320dce8ba4d0f010184701fdba21e7b5b9d465 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...