MAL-2025-188840 Malicious code in procyon-aurora-zenith-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ee9d82155772729a89d4891311cc4f51a4cca870e1ed4af8058e7900dfc6f7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187420 Malicious code in ichnology-eventhoriz-grus-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a51a1a006f545ebbe51221eda4a9f42a389b1bea53ee46c760fbcfd9929a62f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188240 Malicious code in nestjs-luna-meteor-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dc02951e53ebfa9301168eba0b7c56d46b25e61f53253199174afa594b15df8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187613 Malicious code in jovian-postgres-webdriver-mocha-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ecf3fd1d508e4debb89f36a79eb6c7ac29572b4b9404eb582a72f90583c8daf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187527 Malicious code in ionosphere-tachyon-arcturus-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20628fd90048c494290368be2a2d5136b8700e783d74d0b8e85b978626aa1e89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189977 Malicious code in transpile-bundle-upsilon-decrypt-secure (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43f3b2cc46e9852ad1e5d13517a2fc8779647fdf4b1bb64c894398cade68b86f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185873 Malicious code in book-good-old-sun-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2cd52bc87cf6a49f1316acfb38ffa8d78d4dc56904ce569006a96a9d6b4270e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186022 Malicious code in castor-ganymede-registry-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfdb99fb904b107d2e5916b03e976fd9934c58aa09d3cc1cf8f64ee21bc92563 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185756 Malicious code in baryon-sublimation-apollo-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb3790c726df7c55127d84310d6173ff9fed277cd8b991cb51403c52e43c5f97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185734 Malicious code in bad-info-encrypt-boolean-simple (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30d7b093a3c4eac924dc700eb11d1fa0c68214e3d89a9a8ef9929438ab50d583 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187428 Malicious code in ignite-jekyll-europa-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 816aa5bd2dc7b19100deec4058a3379694413dd83819569d46871cf95c7b471f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185528 Malicious code in archaeogenetics-tardigrade-filament-boson (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9224028552e3b7dfa507b6d9c04414e4fc7c9633163fa4ca6c51bf465fb5ef0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187439 Malicious code in import-scale-deserialize-sudo-visualize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1142c72eccfb79fcf8efb7905decff07420da486fec6dd7f993b8b1d932e3010 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186744 Malicious code in encrypt-link-alert-grep-moon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e237a747a38d097627400db5dc22011d345ce71138e2e54d60ee04ba6a1a43d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186072 Malicious code in ceres-perseus-csv-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30c056932c3d3448bce628b008892baa0861966b26f7034bfc9a2259f6077bc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187366 Malicious code in holography-commitlint-xml-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2eb59ca534b23129e0bf53a8b51be5dc5a21ab32c8f17d2cc49aff38bc7718e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187919 Malicious code in mantle-galaxy-vuetify-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27d095cf3f4227e38f0e854fa3861543aa352678e355ebee87d347cda3e374fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188219 Malicious code in neptune-grus-fusion-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39f6784c9cffab433ca3aba62b9f5c8ca5f88d292e84c7ef4b23324259fe740a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189449 Malicious code in serialize-bash-authenticate-execute-cloud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bafd6e5977868e79709452bf04495a7d1495d540bfd749ef73bab2a8aa8c478 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185765 Malicious code in bellatrix-child-process-playwright-geodynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2930943f9773ed3a8e0e8da3151f56613a8f80e333398f6cd40f7d89ac3f9b05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...