MAL-2025-186356 Malicious code in cosmology-schema-morgan-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ebbea8d78a833ae8f4cb8e6115ca30a7e0e39466a843e3dcb9fb00210b1fc8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189031 Malicious code in quasar-helmet-metabolomics-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acc8a6683ea8ccf5185aeeb43f7d442aaceebb4a6daf47fbf4915551e5ce2f55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187881 Malicious code in luna-xanadu-aquarius-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbc41d7b808faaf60c42dff26f6f47331e3bd6a23a51389d3ae2a88c7c0f9c7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189023 Malicious code in quark-perturbation-lyra-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ae7d9e05afc9ae4b162ef3a5a90926fb02dc43eff61ae5189e999b8eba1ab58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188462 Malicious code in ora-release-it-ichnology-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f0614f38ceb975a7b517f8d5650941aed2c2a55fd2a781d90ace077ff3e5644 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188264 Malicious code in nextjs-html-webpack-plugin-express-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b3221eb423eac0b572d326e1984f49231a18c9d5791b59c0f4a62fa33add06e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190070 Malicious code in unuk-nightmare-antares-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f38776d03acc9e82c6b3df743584821904d23bca5d1ab5a0f7a0ab78345a3855 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185401 Malicious code in air-epsilon-zeta-key-bundle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3315bade14bc91e0c028f375cddafcc7a08630f221281feff53d52abe8355d54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187508 Malicious code in interface-awk-balance-epsilon-orchestrate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05f2ce4e85cc2ec7f434ad7f50ef8d6c39c253afdf7a7a04aa4a3ff2d93178e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190465 Malicious code in zephyr-leda-procyon-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fe90ea46f9c1ef07ae94408ce10711a106d0376ef8a4fa2d56004aa48135a37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186227 Malicious code in command-axios-asteroid-carina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 180631d019bab0da64cf4a5f147075f13b45f0a00baf1b63e034c9f47ebf1e78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188817 Malicious code in primatology-impulse-decoherence-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58284e42bf4777ae90b372bb825073354f20b88b702efc139f25470f6e037fc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188864 Malicious code in promise-umbra-css-loader-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 046e1a5e8c43ecc6ce23dc82cfa793bc82eca3490b58b04f0a9f90bb484eff86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188962 Malicious code in publish-xanthus-cypress-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cddde1a52ce767fadb05cbd31671938c574d95abb54b2c3e13d2a133ea934da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190442 Malicious code in yonder-webdriverio-lynx-blackhole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfbb715d4acf64ade15a47fd3c5a01c86a6a1ba2777dc7bb8b003d084a247a51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186379 Malicious code in cross-env-cross-env-photon-superposition (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fb2fb8727e1f7724d5accad4dc8d450ac3e5735b535600cb2fee7ed81e14ac8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189870 Malicious code in terser-webpack-plugin-andromeda-zenobia-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1353b216b9be652df251b86f5fbd1ba87fb50094ee212a5f9118d884dc328d7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186042 Malicious code in celeste-baryon-stop-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 846401c80326a995821fe08966683abd9e419a6930435b3f12e358b285781155 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189251 Malicious code in robotics-auriga-eclipse-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45c8603622ee8e5a543e52a8e1616d015299b855bbd4ffd91c72063efc39f558 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190417 Malicious code in yakutsk-luna-nova-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1247a887e7b5c2f9fd964d4f486657e8b0b2f0cb3db19d32b6971e95515ac6f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...