MAL-2025-188196 Malicious code in nebula-await-paleoecology-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97b549d90567ac211cc5c3b056b1542850ce033df28ab52a5e0600e273d3a9dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189028 Malicious code in quasar-backend-altair-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35756d40a25a4bdb4052a566e3b66b63592849244ddafa63fe0a0df31a150e39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190460 Malicious code in zephyr-barnard-troposphere-nucleosynthesis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 831b922acb7d0b3bb4b811e8e897750f882451d3cf95aa508cf8093a45cb48fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186564 Malicious code in deserialize-load-byte-delta-optimize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b74be2ad25d38b0d959d55db1f801401e5e21d44237d75376a71ba1bed0d94b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186003 Malicious code in carina-solis-ultra-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd53fa33a8f12455a525df8cb7c7ad2cdcc564bbfe5f34a826d792195879d9c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190050 Malicious code in umbriel-spica-rate-limiter-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f24a2c3e8a9bab387f482012d72bbd73ca8104bd9ac31e0303a0cd6bd10374ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190182 Malicious code in void-oberon-supernova-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1662dd30a3bfdab50f06631023e83a010a07f87f264297ccff4a1f470029289c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185609 Malicious code in astrophysics-prosthetics-callback-deneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d0ae3b110625efcb8d84b8b454479ca3f743b784bc4e5716c246672824d210c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189657 Malicious code in star-secure-alpha-omega-key (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9e2cb0a810d53fc56e92cf8e06c67d354ced3a184d4958586921b03153bf7b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186662 Malicious code in dysonswarm-loop-command-uranology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee1019e8fa74570eaa1b22a674d4869fc6cdd1fed122f53267d55d7dbaa65146 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187147 Malicious code in genomics-outercore-mongoose-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9599af6ad25dd61bdaaada8e8915ddc13209f52f00cd009dee659067e46b311b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186714 Malicious code in element-ui-jabbah-chalk-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db3f9316015fa5ef848708130ef54aed0cf418b68094a0778716dae464213509 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188307 Malicious code in node-config-lynx-cressida-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1a8390d9b4f7f0ca066259c5d2fb5a70e40e66cc7525724d3aadbfe0acf5fd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189757 Malicious code in superflare-tectonophysics-less-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb1b8da8dc9f41bfa1ba5e27052994c79ef7554a21aa878b14d2a0e3e5b19562 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186172 Malicious code in cloud-class-stack-xml-runtime (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 233273838b0bc9fcd5abb46cd15a57798f84aacac1be400324b3c6b7173ae244 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188279 Malicious code in nightmare-version-levels-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31a297fae66d552bead526aba85b7fe7db06f9336bc28adb7ec24729c055c79c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189575 Malicious code in socketio-canopus-palynology-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70191f997c3cfac0e33d3c4234b349313c14a3109867266b4e8474d4b01bb00a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186874 Malicious code in event-biogeochemistry-blitz-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c168aaa32c6134d19bcaacecc1914c528000c3a5742ed4bc55ec24aace833057 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185707 Malicious code in awk-node-abstract-interpret-alert (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e57b94267f695268b2205969adaa9a5ec8130180999c45d34e32b1a23caa7f70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189457 Malicious code in server-asteroid-foundation-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bb40eeabda7ad4308a0ba204f8ac1fc138af675efd1d2031cba0b5d8e8d1279 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...