MAL-2025-186911 Malicious code in exoplanetology-eslint-config-eslint-plugin-elara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92dd8ba2ece7a374b69507ba324e1274e708be47b29907e414058f5f3625588c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189817 Malicious code in tau-import-file-bad-byte (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4109c4388178c46ba55b1c77f6875170c704f0586b730e075dec134b695d713d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188919 Malicious code in proxima-shelljs-spinner-brane (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f7bd32ce89463fc87f2bf996cd96de28e6fa265c87a586e1414a63e912a88fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190054 Malicious code in uninstall-sails-development-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f009141574a4ca3a211c93ce3277437cc7eb9f1f2db531117da82598c90e901 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187555 Malicious code in isostasy-slides-augmentedreality-jabbah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5c520fdb6218dccc2dc1ade6fa90c7843862fb37f3d60582efabe4b3962017e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187345 Malicious code in hermes-jekyll-io-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cebbffea7d927de23aca7aba4078e9cd9b853bf3771183fa290a72232a56eb7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185855 Malicious code in blaze-transport-genomics-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a961479210925383a0fbf886ccf1a83d0b482d132a4cd67413a4ef5bfa053292 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189136 Malicious code in regulus-protoplanetarydisk-quito-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68aa10411418a1e9162ef35ed572c716c7be7fd3f732221752c375e50f69b740 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189322 Malicious code in sagitta-shelljs-halley-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c27d14c78f0650cc9e36a6a09704b5376e65f49f575b3bcc650e67f28f0dbb37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188881 Malicious code in prosthetics-outercore-javascript-taphonomy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c931a82fa3afff46bc1fe441ae31982dca93b3671d9adfa8e375f3fe42ef6c9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190401 Malicious code in xml-sigma-meta-daemon-delta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9814f634f331ea15ee456dadfc2e7f1468d32fd0e4eb9ef64568b3b1466cec6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189495 Malicious code in signal-quick-proxy-data-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1253efdf52630a1193d5c52296772c271c6a20c35d7e2415885b3a9b7c6b940d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189435 Malicious code in selenology-dione-envconfig-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58446230808fb30c9c6d9ddd433a5054ef4d641b42fc35972fa47ede2fec4431 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189033 Malicious code in quasar-promise-kaus-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 041ad73f1af79afd5f9b6ca0c4c7ba14072a32c0a2b16fd9c8af00d6bf033c50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189676 Malicious code in stratigraphy-helios-janus-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf187e7a7ca538a0b527d50aeb801c014ec1950459808d4fe3615e1fda01ea6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185964 Malicious code in cache-mensa-leda-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56788cff5b913c5a179cd511025821a24df1bc1ca382527d1e91bf6fd180e3ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189844 Malicious code in tectonic-pino-pretty-build-elara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c0bcd2058f31fec7229382d839c7ab77d7171eb0c186dc44476d099d33ed8b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190290 Malicious code in webpack-less-heliophysics-wavefunction (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e8987f4d7ce795a5f2186e61fa899436abfaff67309bdbbd27646c1723add64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190441 Malicious code in yonder-sedna-innercore-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 235087749a464cd5d6b6c22ced79614476b2f65285a4ec733bc5e779af8e4a45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187890 Malicious code in lyra-fomalhaut-arcturus-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53096e7800c4afe7142f8895c571a8234b3cf07054a65f4b0e757e5cbb5d578e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...