MAL-2025-185564 Malicious code in ariel-xenos-dione-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db83500cf3a16dbc3ca0c22ba4bff36c9de611ba6a892a7bc8283db3e81e976e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185906 Malicious code in brane-halley-solarnebula-stratosphere (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dbe993ab0d2060aad81f817e0d23ae578985071a1a988c2fa1c1cd10c224534 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188439 Malicious code in ophiuchus-dactyl-elara-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc5943127d4a9fb92d910209f17a3996f3b16a97de9f0a91e5392fe0e6350efe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188591 Malicious code in pavo-xenon-markdownlint-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b73f8ab6723aec7e50b5b9f873fb31ab31825f1fdaa756acdefbadc5f96ca02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187460 Malicious code in indus-reveal-md-gulp-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5c9a9ebab25040a460498e03007c573cbb11e115468874f72229a75bd80ab64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185663 Malicious code in auth0-astrometry-build-decoherence (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ddb2af6386f10337357d55074c07990fba893264b9da6afddbc5272c996d2c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189622 Malicious code in speleology-unuk-hydrogeology-supernova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54c4c49a2a50b6d2d44be0544067e69a2c0491f3559fe4c81e776971e31c8737 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186256 Malicious code in commitlint-resolvers-procyon-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c84a42a0bd7b27857197441ce982e9035d4e93ebf009d7bb23942627d9ce0b70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185954 Malicious code in byte-assert-finally-hot-sanitize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 182a5304e0975eab148e7260e5e3682cc7bfe2d1b2dfda22515c7d7e3b6e02b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190194 Malicious code in vuepress-toml-magellan-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d73486af759f7bf45f85de2534aee0ca48048d4c03aafacd5b532d679496ef3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190440 Malicious code in yonder-sass-loader-firebase-cosmicsilence (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46cb086ef793321eac1bb5c979009fed3c19bdd4e27384cada7ff0f8aed49e83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186631 Malicious code in double-decode-encrypt-cache-bundle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2dd120085360bd941b6b618bfba167ef9076e6663bd3af7dc247e1b7a6588f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189296 Malicious code in runtime-parse-user-authenticate-runtime (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 164dbfef9ef242d560dd9d9d3dd6fd1c685123e8497af22e16d59bf89ea029dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188457 Malicious code in optimize-report-pi-module-hash (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00eeae1ab2bbeca7c4cd632577cf6916c3401c525a645b193b91425590b719a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190030 Malicious code in ultra-html-webpack-plugin-zenith-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 854f44ca4df072d11c0a459bc99fb7561906493f41e538370f65715dcc2c9d5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187301 Malicious code in heka-bootstrap-javascript-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79bcabd4095430daa841c61c56b16ee60347e93be2e7f9c25d47d2a34c398593 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190099 Malicious code in uranology-development-nucleosynthesis-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d219832a5615266d6c144d590d3bc3db842fedcc2489b20a40c23603c3d7e2bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in permission-resolve-function-fast-try (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 459860edf67e24cf65eba1b81de8a35d10e8de00a10c131af68c3734515c11af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186648 Malicious code in duplex-parcel-nodejs-membrane (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa06346c89852e6b9c279cbd0b49045bb71d5ff9157585fa04bc9c20fbbf44d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189775 Malicious code in superposition-quasar-iota-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbdfc8778c8d71e0b855f75cb949b20b7db9ea2d330350f1e624393f65ef02ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...