MAL-2025-187942 Malicious code in materialize-dotenv-safe-sublimation-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eefa120636cfd6f73b190f56220380ce77849e4a839a8559d1106992e1aa7d8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189930 Malicious code in throw-uglify-old-spy-water (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1384ba57693d772926659c64ade30837da4880fde1b05621a4e5b0bf482469d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187260 Malicious code in hadron-postgres-phylogenetics-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f7efecbc67236e9f7c84f6a8aae55425b28b28775927173eba1a0a284193afa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186560 Malicious code in deploy-good-data-double-unix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9f539fb8f3d51fa364bbc575962a64190641a7845e4ad288836f916b9fe9df7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186878 Malicious code in eventhoriz-ariel-atlas-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92528c607e087330fb36dbf06bc64f943543eede0e85245ebaa7e3c0e0699c86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188637 Malicious code in perseus-xenon-grus-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3dba22527ed8f27d29b6a277c13c56373df6604a117eb21a0e723a31111238f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187953 Malicious code in mdx-hyperion-taurus-antimatter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d5dab7a7c597d9ff7f83c4f405d6e51f5f69a9246ec69aaf50097b1fb04c2d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186341 Malicious code in cosmicweb-antares-lithosphere-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0506cb2e0e182f936ec1b74d381874e93fb15d69cc3a6e7245f53e539eba8e7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190251 Malicious code in wavefunction-procyon-archaeoastronomy-uranology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d827178311a22de7b56e9e1c381516b8c0e5313a960ee72e8474c15d154b6e51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188281 Malicious code in nightwatch-aldebaran-stratosphere-bionics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec563d816b003e006c14699ca210e0cd8bb8c5d8147fff63a6131a9fed440e13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188639 Malicious code in perturbation-bulma-mensa-eventhoriz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d51a9c3a3b80be94feb024b2c0609f78f69db01e5b8cb7bfd485aa825e763b56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188827 Malicious code in private-enum-compress-upsilon-omega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 487ece3448f08f70c5b2da4031eff0deebbae4d9f304ce3cc6cd1338fefda9b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187980 Malicious code in mensa-koa-castor-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75c11e9097d5c00ae335a975d0bd038394411ebb396691bf1af493adad32a9d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185904 Malicious code in boson-module-subscription-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b125db232d506bacfed4f1c5a620f3576c9251eeb7e82fe2ab4fc0f609df2ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187492 Malicious code in inquirer-technosignature-slidev-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a80471215de05dc5eb8727a26889d075b75a02f35290f888d2beb43d04a1dc99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189237 Malicious code in rigel-markdown-pdf-jsonp-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bff23cd8057496204d56ef6a563c25287b1811afc993a576c7b38a7606534e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187775 Malicious code in library-biosignature-bionics-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c195849028cdb53692f81b71f60bedc1c41ab1cbecd2d1f708262bccd1f04c34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185946 Malicious code in bunyan-jasmine-winston-geoarchaeology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fa105000e7cc509705628856a64c489581c50221c6ae02d7ad46d875a191553 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187940 Malicious code in materialize-cache-neptune-cosmogenic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85ce0c130492aae3151f1a9569559e73ddc5670f78a3a142e9f6824e03610e1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185888 Malicious code in bootstrap-forever-uranology-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2670113820a8f2a2c46158eeea3fbec418026540f0e9939b1e4f110363f9c9c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...