MAL-2025-189925 Malicious code in throw-bad-orchestrate-analyze-cat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7886aafdc1134f17a171cbf56c87c0a322e52665e05ce9712e28c73e51ac95a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186143 Malicious code in child-process-concurrently-chakra-ui-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66acf8a52ab5f47e31e87daa88e9ccc679f3580c46543cd05ee50741b3f97448 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187751 Malicious code in less-eigenstate-eris-mineralogy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77108ac43c4067f2b2b30395cd971409d60596526481a9d008575809b6265deb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187471 Malicious code in ini-koa-adonis-astrometry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 814dda9fc098a95449685bf70ed597eaf7718a69688a6739317f7af0058ac94c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189767 Malicious code in supernova-miranda-ophiuchus-resonance (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eee783b24405094b625f3cc656fb7452e71114de055fbebd3c90db0063e74b2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185821 Malicious code in bioinformatics-pino-pretty-mutation-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68d27958147cb7cd276409e0d52dcc556e3c5e0d323436adbab13384b0788339 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187988 Malicious code in mesosphere-genomics-oscillation-mechatronics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cf08706524cdb0e4de9ef31caa8df577e30a9625291938358cf86d5ef9a2cc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187170 Malicious code in geomorphology-materialize-perturbation-accretion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f950d80fddbff7c9f345af602935a4448041c71c6e3aa0a96f263a4b8a2207f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187798 Malicious code in link-typeorm-nebula-eigenstate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72fcd61b1ebbef2bb21f395e514ac614ffc611617ad7b96a4f87213510556a06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187002 Malicious code in float-rain-finally-yaml-air (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9e8dd6638a0a74e6001d7a9336737e6f0567173b451b5a897e4d9c0acb68406 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186428 Malicious code in csv-dysonswarm-aether-optimize-css-assets-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36bf85dcddcc722b3f545730fed6924d3f05fa5adac9e83f9ea4111f99186498 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188442 Malicious code in ophiuchus-polaris-mineralogy-proteomics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6990907cf478a6777456e1509b1e4616038bb303ecad91eb09e0643fa34aef14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in planetology-sociobiology-spawn-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e157db7c0e004f3948a95876c03456347236d1cffacb7a03e4f712011774422 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189755 Malicious code in superflare-on-nestjs-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4bc374df6bcd185907d9484f3b7435d95ad6326a7b1eba24209d2443c9e3479 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187607 Malicious code in jest-astro-despina-aurora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 569fa8ef9fdbddd1906550949c47b3b5176f9b5c58439068442b4ef54ed34221 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in changelog-multiverse-heliophysics-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d26b7c4b39b23830057045d4ac69e6039758294f45b8f6197cf5f5af279e466 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185656 Malicious code in aurora-sync-buffer-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76b4ed240221e294fa55d34536228a20e0a7f3ca8a80a0e59f3caa86531c263d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186438 Malicious code in cybernetics-duplex-wolf-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a192610fcbb4c2073978161ee031742d3f1f30d648b3c508919e4591e93ff254 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189418 Malicious code in sedna-rigel-package-xenos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b74aa10afb22fccf556586d4350aa1831e973a396137a512cce8a0fc6cede946 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186850 Malicious code in eslint-plugin-weywot-bootes-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cd1c916db1f971a732417678b685bfbb98d4333956f25b6febdee70d72eb371 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...