MAL-2025-189540 Malicious code in slidev-scorpius-dotenv-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35a54165db7da361334553c966eb5152e75555cd344fc44c637a633e938c7a11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187714 Malicious code in kuiperbelt-yakutsk-bioinformatics-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 885670282282ed71c84587d4d2937ef17189c810ce88b7d5f8c18a44a0e539ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188363 Malicious code in npm-publish-cross-env-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f326fe849575cb4d47994a975a7fe829719b21959ffb49ef1ac24126a1519ae8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188791 Malicious code in postgres-promise-transform-farout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea347cd20aedc5d8182d0495c956fa7c35ab0496a8d61ed58da90135a7463ebf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189576 Malicious code in socketio-chalk-middleware-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5456f60ff4b15c35d27afbffb27cbe1a99bfed860e26c0f7ecd263251301e09b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188734 Malicious code in planetology-borealis-nashira-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee1f23cd13d09fb85a31f2ed20db00b1b9f7a5eb92eb83ee2f61400026501226 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187713 Malicious code in kuiperbelt-taurus-csv-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8993b5329a7604ba0c4c94d86538798b1f58cc2d7e21fb16f89b966ebf27387 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185444 Malicious code in alphard-supercluster-exobiology-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caed8990fdf184f5ab65614efd7c6f182f9c3d9519fa198517d3ca7c0a7bdee1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186933 Malicious code in extremophile-geochemistry-dendrochronology-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bea310cfefb66f08a96c3188538369447bd04612535e404ae87469b672b6668c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187870 Malicious code in loopback-remark-cordelia-commitlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d03050b2cb2866d7de11164971c4591795fadadb14bdf9da6411cc366238b169 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190090 Malicious code in upsilon-decode-catch-log-function (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d0f728a55c388778d0b6ad28ccfe8a52b73fe5f721ab54b852d2982c0211dd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186301 Malicious code in convict-ultra-paleoceanography-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c2845167a2257ec7f82721ef915aacbaf01c5ba75ccb341823c0098c0746549 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189273 Malicious code in rollup-plugin-loglevel-archaeoastronomy-on (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ae1d18ecda3a4a15013d21d522f0598cfc55b2f622436d4550842dd4870a5d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188022 Malicious code in meteor-envconfig-quito-singularitarianism (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db114004de8a873c258c341f245d4f56fec63e857a8166cbe06223c1d7447538 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189140 Malicious code in regulus-winston-lepton-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8893e4de90f91d41a2331fed671b5ca45bd61ed7e48d99d1ceb457af9b93abf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185601 Malicious code in astroinformatics-ethology-venus-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 226e9d3d2ba28c131f256e2a26ec85fb9afec9418f57e00d7ec0b300e0e98206 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187212 Malicious code in graviton-jest-sirius-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 708513596392842c51fbc68d96a94effdcbcd2bd6e193062a68f8d11148c0e1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187918 Malicious code in mantle-asteroid-charon-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc19ae5a48a8eeab6ddcda9393877d6e8a6501c2de85c903efe8b1735889a1dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188899 Malicious code in protractor-hercules-xenos-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29d84f5886e98b783c79bf948e8dc881b642d93250a3318b5a585f4336a1d038 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187205 Malicious code in graphql-karma-cluster-mongodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ad37a1bc3bc4069bfd4867fc32ef836f405f93fe38cb337fd1e5e922bda5076 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...