MAL-2025-186225 Malicious code in comet-rehype-transport-entanglement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55f76cda7e3ed87a43e6e01759a8df12b7cdc8c0be725210b3f7a49e834137a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190030 Malicious code in ultra-html-webpack-plugin-zenith-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 854f44ca4df072d11c0a459bc99fb7561906493f41e538370f65715dcc2c9d5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186188 Malicious code in cluster-tool-quasarjet-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77d3dfb3f3920e3a072a4e1193a85adde9b2af5801f438ea99da4553b52e6154 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ethology-phoenix-unuk-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 559be27cfb1ab2f6c01cd82e42610f9bb22a82253b37efdce765d9ca8e93c5ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eigenstate-ophiuchus-sociobiology-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39d559df9f19acd3ade6c6cf4782d283afeb12dc0ef2bb84865475b6cbb34c0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186881 Malicious code in eventhoriz-native-planckscale-cosmochemistry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1da3fc7db81f4f6607a2fbdcf5a7717de5cc4c1f1f869bb3a677def9b158df3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185353 Malicious code in abiogenesis-airbnb-supernova-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b35d79dea66f1fdc77e0451d307bacb1912c7849f9e4094598cb136d4337f33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185792 Malicious code in betelgeuse-frontend-titan-yildun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f95eac4fa944ac0a19a117f2cf25d1f3042447fe03373fb6878a2d5c26c18ffe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rho-enum-secure-short-proxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc98f3a6c284cfc1f088763be06cffc4b095839b8639d60ab0dc326aba9d00a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frontend-uninstall-foundation-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 689a30b58745647f6d8ae54285da6f284047816f0b89c8c04d4a4e632d5b81e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187881 Malicious code in luna-xanadu-aquarius-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbc41d7b808faaf60c42dff26f6f47331e3bd6a23a51389d3ae2a88c7c0f9c7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187743 Malicious code in lepton-pyxis-aldebaran-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7ac111d3e6fc500ddc5ca2ab07f3063deb4b5b06109ccea86cde45a3ed2bf24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188937 Malicious code in public-final-iota-upsilon-array (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df5b112f5906a2a0cd00f09c3c6173c301de7c42a79c707edaf7e7b5470c38d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188154 Malicious code in mutation-exec-arcturus-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 482caf12c32414f2e9b669998df2ea4c0f636c61aa2294ed275285eea1b96a5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aether-tachyon-geochronology-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97c5712385fa129477281e98cbc714546f1b33bda214810ca0805130a57eb58d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cosmos-public-warp-planckscale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1aef269ae3ec3a16314758d9c600b3c87b62899a0b3acbcfade8eb9b93663658 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185521 Malicious code in archaeoastronomy-lint-staged-polaris-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7ff83f7a5d6fc103e22f1e1f849ed6afdf59b479690cc50d9b75086d617db1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188632 Malicious code in perseus-selenium-lepton-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9bfc1cfbb199ea1ca3bb90c697618a7d74ab51f4a88a59c1319771b74755a06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in global-apollo-dysonswarm-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8624af2234afa89e899457b5b5c227d1c1b09212d1eb8b2a207d466c14a8b2e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187473 Malicious code in ini-quito-stratosphere-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80addd4c113b2cc5947537311ac67c987723ef1ebcd79a98f25b63fe603be5e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...