MAL-2025-188381 Malicious code in oberon-mdx-hydrogeology-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03f7ec2bd6822ff1708b0250bb0c57bd1da996bc00fe5b964037082fc9942ea0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189026 Malicious code in quasar-astrophysics-less-paleontology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 796dd3f919acfff7b29424059d3447b656538e5e1af0de86e836fd39ed3ba4d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185686 Malicious code in avior-gulp-sagitta-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d74a939914422a428ce54ff6c5a30cc4c419e3633552ab96d352402aa0c4b77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187300 Malicious code in heka-antares-vulcan-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41c307536c58204cd3b17873413e4c2936eb8555c5cc85cafc399332a5578418 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189123 Malicious code in refactor-socket-container-wind-sigma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d89a8b301a82e34718e719086eb65c46906b20adf7618bcf4881930e6ec4b03d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187984 Malicious code in mesosphere-achernar-paleontology-deneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4217e8c9e039a28f6f66ebffeff5851761a959f419633105a71802b7f46fd35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190062 Malicious code in unuk-cryonics-gravitationalwave-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 225c6f028045f33fc48c67590d46948179140d8d81db33b12d629102859783b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186964 Malicious code in figures-duplex-magnetar-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3eae1d7027882b6a70265a27433bb8857139add8539583e992546d667debca8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188982 Malicious code in puppeteer-module-sails-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 258574792c4358cae9fb04cfb28fc03f4155696154704c103851e20e23a91bbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188751 Malicious code in plutology-cosmicray-fornax-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b77624c3e7b1eb6b1cfe6020796522cf5b3b7f389af4d08eb75455d191ead3be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188503 Malicious code in paleobotany-warp-less-uranology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e503cf1f4b68ac4105f21495630d3b3ab9fa830d3e32df743899bc45a7467430 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190398 Malicious code in xml-procyon-css-minimizer-webpack-plugin-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 325e6fb2aad5e2d4d9f23c08a7f9fb4551f5eb45d5c80a86846c82f656b10345 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189614 Malicious code in spectron-webdriver-async-primatology-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4810ee66c68692cb4e0793f469d0d3874bbb2255c23b0dd696e904d2e43f0c2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186355 Malicious code in cosmology-levels-terser-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 288be03c8843b42fcdfd629ae8d089e419583efc975261b79fa3e9b75d609a23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187807 Malicious code in lint-less-loader-jekyll-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94f459bf148cb91c899d7aac0403072e50f2ba7547640fe1ac3cebbc1d9607e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188590 Malicious code in pavo-paleoecology-pavo-kaus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d90238c3f7cfcbff6bd504601fc2e280cf775606bc574ab0e9207f9ae50ef25e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189281 Malicious code in root-resolve-wind-stub-interface (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76745c37e2effb609da0372dbe196b1268ae5777b04442b99e59f3da1c499739 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190223 Malicious code in warp-jwt-mongoose-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8401e65a080266a220375bbacfb5ac32aaee20af15f0f37929bdad4bf41c1b29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189033 Malicious code in quasar-promise-kaus-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 041ad73f1af79afd5f9b6ca0c4c7ba14072a32c0a2b16fd9c8af00d6bf033c50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187813 Malicious code in lint-staged-inquirer-transport-hawkingradiation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfbb20d4bd0ecb369e109ab32d36b1f7d0610fb45df7d23e8f9bbf0db5f3c22e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...