MAL-2025-188250 Malicious code in neutronstar-hologram-volcanology-asteroid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e16c455d2bae43492d5ad9590dbe8f3ae4aebfbac806f385ed676a3856de3121 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188613 Malicious code in permission-index-zero-visualize-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef95024f895fbc9dd8bd4d4a7180084f57208d75170afa7adc3e52403b32a029 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188249 Malicious code in neutronstar-gravity-aether-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f972bd2bdf22287e5777a5a623ae50acb15807c5fdafe094d797fd69123e914b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188387 Malicious code in octans-command-io-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 112b69f2e1d1d7f16bcd45f8c8495468b99b558ec30f33487b4df15845885c7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188610 Malicious code in permission-big-omega-alert-phi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector becde5edddf85b8ab06be7625942764cc139abc1be9d4826b8cc709bcad57c28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190042 Malicious code in umbriel-ariel-rigel-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5c72945619dda01a368dfe59be292a5a07f66cf7ed86d55dc924a54ff02d902 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189851 Malicious code in tectonophysics-transform-crust-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 362c7a3c2a387c1b0b23c2ad16e0ff6e12215ac224b7fe3f752d831110cf1fcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189893 Malicious code in testcafe-canopus-graphql-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f4cfec36e2798cb46c6101c52a91328a2ffb0f2c3298b732437bea7f1e20372 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187248 Malicious code in grus-schema-odin-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5015d8e05db5097f2ab0758f0d0d42285be94e469cecf52668d3df1eaf57c9f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187335 Malicious code in hercules-deimos-superagent-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d98d6bdee6ef3106d12f87df57e1e2b9c3528bfbddfd348a03903227af37f81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eventhoriz-futurology-event-chariklo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c96777a755a8d3822d329b2a9e85b002427023d67467caa7f45bb2d7653b76d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yakutsk-metalsmith-astrochemistry-terser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 716ae5e8aa43202b32c8b4a3aa8cf544d3e6ad69c383911d5515b92e5ed44899 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hermes-polaris-regulus-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce1d1acf4b526b1c21a011aeacdc9ca429c57917bd730015f043e99c0c34db48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in node-sass-commitlint-lynx-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb7d81eb99a4b615630e9110e9e4e09cc3bdc9fe3ab07efd0d8b6117778b75e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lynx-nashira-heliophysics-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43a45c0b6f2ad44fec8b8cd437328119eff54f462c614ebca18f5aa3de04082b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lacerta-auth0-callisto-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11064afceb6e678c2829e4532c2a26703f08758ccc1c624ce372d6c569a19665 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in remark-bellatrix-superposition-interstellarmedium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea1342c69244da654b3900d26efb403b53881ca8917a548d692e0bdd73e2e976 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delphinus-paleoclimatology-stream-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d619d01df637e0ed08a8b5b8184ba8a98b8c2e150823265edee3ebdfaf9a7c8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in isostasy-loopback-docusaurus-inflation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 797720d1b8288c7e2626da0beb9bf3b04fce2db05038749d1edb8dae27d74f6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sedna-enif-fusion-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 412fab03b211814a517655b8de4f566125d1957ed1c54ed9b9db8e355e080803 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...