MAL-2025-185970 Malicious code in cache-umbra-geoarchaeology-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63b325ee42e9c4fb0b6333f6448be22adc3ef9fa102f3529f68c8eb58d077bf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188262 Malicious code in nextjs-event-chromedriver-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ce4df6b55a16a8f6624b07812fea2d0e0020b2a6c4ee1553d910f9f217c82f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187901 Malicious code in magellan-fornax-chai-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f147618afc46d2f36c90e55a3b8cfb1e6621d8a22911f93f8e55976aa29866f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185663 Malicious code in auth0-astrometry-build-decoherence (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ddb2af6386f10337357d55074c07990fba893264b9da6afddbc5272c996d2c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186229 Malicious code in command-bootstrap-exoplanetology-paleontology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff1c98741dac0aaa20ffdd44166754eaab39b72cb59265ccace7177c3ad5cb09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reject-static-theta-info-try (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a84dc4b74234abfadc82978e01f9a68d8516ac07a94e6666e93a5703d7fd7682 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in paleoclimatology-cosmogenic-crust-kardashevscale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00e15ddb8489db7af6fbf7562f37b8fc6a58192ece39405003e76501af3efbeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in genomics-biohacking-xanadu-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3db31ffe47d54cdaa5a7c3fc25c8f9613c3d1667e57a7e9a8b85bfbccb19d791 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190369 Malicious code in xenon-comet-xo-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 052d305986eaac09c0a7186bb66c0d5c0c3ab65f1a3b1b59a8649f2412ade857 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189812 Malicious code in tardigrade-perseus-scripts-csrf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38cf3002a682a40e9db25a7ab21c0c0d43bc2a7a7b6565671c25154c0976ea30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188117 Malicious code in mongoose-wolf-deimos-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 278e4a12ef49eb23953dc1bea73ef37ad5b5174a325aaebbabb2faba7c8c204b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190303 Malicious code in weywot-prompts-nestjs-nuxtjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cedb656f95a6a50d29e7c67d508119b1851a5881daf0c66c8520b90448ef323 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190430 Malicious code in yaml-root-xml-process-proxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fa0f9574427b5738faba6baaace11a9da2f9b5a5f3797f4432fe01c3bdfead6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185862 Malicious code in blueshift-exoplanet-buffer-primatology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d143c1c5b2aab61f831840778fd5711d8bdbdd3009b39af1830df9580dbe9f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188827 Malicious code in private-enum-compress-upsilon-omega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 487ece3448f08f70c5b2da4031eff0deebbae4d9f304ce3cc6cd1338fefda9b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188505 Malicious code in paleoceanography-shelljs-umbriel-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2386202e5955957868e619896d6eb531b3f4a1f167c4964e7c4ce5d273871974 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188127 Malicious code in morgan-react-bootstrap-cz-conventional-changelog-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d40512e96d10fee42975d7328b835e1915a6224aa78dffa4f19048edf1a51d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189169 Malicious code in remark-barnard-commitlint-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78fbc8f80c4eaa1b4e6c6d18faaabd90528b2cd1b8a5e7b7f6333164c23b83cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188650 Malicious code in phenomic-avior-greatfilter-boson (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b201e815b3fed6dff5cf2c8c8dd8e975795b4c086f7ae845825da2bd13da55a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nu-interpret-container-grep-bad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09fcf0f0b56c9bcce303f3f0b00cd434d5f276b06967ac7541976361325bfcd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...