MAL-2025-186438 Malicious code in cybernetics-duplex-wolf-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a192610fcbb4c2073978161ee031742d3f1f30d648b3c508919e4591e93ff254 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188937 Malicious code in public-final-iota-upsilon-array (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df5b112f5906a2a0cd00f09c3c6173c301de7c42a79c707edaf7e7b5470c38d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187065 Malicious code in fusion-inflation-dactyl-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afd7df62b134bcc7afb6138cd72c0148fe9828de23d7012fa0e5c0c2047e9063 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188372 Malicious code in nuxtjs-heka-google-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc5c65fb21b2b3d1ecc525d9eef20278307f1623df27345292cda8081c3ce4f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188530 Malicious code in paleomagnetism-process-rigel-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 806c222b404c6835419bb2dc3e3292a0bfea544dc0e55b7579ef348d91329803 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188539 Malicious code in paleontology-tailwindcss-tethys-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff9bf7ae090235d58ac50e3f500d0ffbb3709c476bee4ff023db6e4b7af13da0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189020 Malicious code in quark-hugo-geckodriver-ionosphere (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e05cc6dcf7a162f7144c009efcc0f8be0d5b8e0843a7849be001c03b0c02089 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189675 Malicious code in stratigraphy-castor-subduction-thermochronology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f95e074cf44d088a943a7366dcf7a4c1bcf3bd044d9b79a6733eab0a5ec6e5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188932 Malicious code in public-atlas-europa-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69d942f4eecebe1c34927246c3958d75490f7cc7e5b1c2c79cee69ab01ee5509 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187425 Malicious code in ignite-configstore-morgan-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8906d0c8e8c3c3b8deed98d2a4f08dad36cbf617d92d432626f92cb068681443 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189205 Malicious code in resolvers-typeorm-dependencies-development (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5dd2a238d88c0adffe27656503d08c62254216af2d36d818b92df13f4db3c0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in envconfig-protoplanetarydisk-dotenv-safe-isostasy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2892eb4fc40461d42c2bec88298e5cba9f2060177b8aa42e3bcf5b4584a481e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187942 Malicious code in materialize-dotenv-safe-sublimation-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eefa120636cfd6f73b190f56220380ce77849e4a839a8559d1106992e1aa7d8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190160 Malicious code in virgo-terser-webpack-plugin-resonance-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ab26d4bc9b5b8cbf6996ce1f3dfcf3ed1761087d93cbcdbea53728f32230010 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mira-halley-halley-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4d654ea2429bda07d6516d7e6c195f982a2f1fabbcd309bcdf070a02a7322d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185701 Malicious code in await-throw-psi-simple-debug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 937c92f1846343ce1e7e08ff398c3ef8339757e31ea3f856fbedb5d32b508cf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188904 Malicious code in protractor-xenos-aurora-holography (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1daf88a4cdb645adc2c90267d92d9769ac690de4b4cc3f0998b550fe6bf1ff1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187090 Malicious code in gamma-char-visualize-moon-daemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91808148516e73f132daced2f432b7c2f829ad7821d229f086fa5904c51042c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186399 Malicious code in cryovolcano-grus-ini-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd0a229347ff016f9d70393ed03e8a4a921a6e4c86a3a5603209a0d4bd75855e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190355 Malicious code in xanthus-dotenv-safe-markdownlint-xerxes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65059d3c138e66e932e624190cf09688f2f69178722bd6940b7cd7ebdb558347 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...