MAL-2025-185659 Malicious code in australis-prosthetics-cygnus-xerxes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2c7f44f8a1fc4bee8f9c950dc48f3fe4c5d0ada66b921fdecb7432b24e85745 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186356 Malicious code in cosmology-schema-morgan-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ebbea8d78a833ae8f4cb8e6115ca30a7e0e39466a843e3dcb9fb00210b1fc8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186169 Malicious code in cli-protractor-sqlite-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 190c6c3483bc31b868e8ea21008cfb3be634df9fe8e3d9179835190e130730f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188159 Malicious code in mysql-enceladus-cressida-whitedwarf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30127f561aaee92f2844597d8f2c4f4c05917776b7427fedbbd4c3112d2b841d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187365 Malicious code in holography-commitizen-kardashevscale-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c1f20171430318cb8fc7ea3e9103efebdb68821c4855d5dc0fe7f1863fbf6a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187289 Malicious code in hawkingradiation-backend-farout-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4e00a156c0cf07c9efdab34c198a6df2120800c4426e9371ec2bb80ebf0b4cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187598 Malicious code in javascript-hyperion-quantumfoam-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6466804ddc9d527efaec99e8aff724f89de4847020162e4808add42d0c5631b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190326 Malicious code in wind-quick-char-yaml-thread (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddce2ad9ae1e5a7ff23e318e9d892e2368904076cd87af82d0c6e57a8ee5fd2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187541 Malicious code in iota-levels-foundation-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00c2b0af1eef0fba29bf292945385ea48af585baa02b34ea53e9ae76e24eca73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188941 Malicious code in public-perseus-zenith-blitz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1e0fda9529023a9e7ae60ebe50dfb049b2ebe3a6ca123f31ad56a1ef6721213 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186857 Malicious code in eta-sed-assert-spy-hash (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aba02fba2294b944dedb22735bc1a124430a994c135af1e2b1361494f868a743 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gatsby-enif-tachyon-prosthetics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd3e1fe40b9f4663cd8b878d886d2d8206a84740ad4a30ca7055e0b73b99ffd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186314 Malicious code in coronalmassejection-sirius-morgan-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d80a0fc837162df43771bbbaa03d52e4c3a0b2bb5a2cc9e42a63ae33dfe82d0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189884 Malicious code in test-meissa-stream-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e201ad4797f6c1d0adc706095b06d260333b5a1677e61717564549f492ee379a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188928 Malicious code in proxy-process-rho-chi-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcbf9b30ea0fbcd0b34c3091843c49cea3a14ca9545d7b4ab2def8a21e698b4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188065 Malicious code in miranda-borealis-nova-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91dfceb96c2bb4d76d95411a0920184fcb12cc9d7aa77518302845bae0a3e6a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185502 Malicious code in apollo-ganymede-algol-impulse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6884123d01cc47416990accc41d7ee9a8c0181cfe461bf7c83149d09d680ff4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188812 Malicious code in prettier-stylelint-soap-acamar-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c851c68dc42116afd02c42bc9814743ae9bfc188df787c2b162f447bd138e4a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190144 Malicious code in version-pyxis-spawn-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7caa9461ef60c5ea68137682e034dd31e821e161089f2d21e63422f8d9889d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189439 Malicious code in semantic-release-boson-lepton-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdb5355d7a6caf4ed4524b31f706aedd024df4b09ee0659e35613815b8d89df7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...