MAL-2025-190037 Malicious code in umbra-farout-barnard-redshift (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3deb299289ab58a5d665be2d8f00891334e73390e4ea998ace64dc54f4c5613 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190320 Malicious code in whitedwarf-selenology-jsonp-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b83a2580056cf6aa51868e0aaae0415ef996d229c5d8b9ab779a3fefa1ebfc67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186410 Malicious code in csrf-farout-backend-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dbba3ecd123044b33d935f03d97d2a75be7a13c2dcaf66b322bb5df75f88737 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190444 Malicious code in zenith-algol-nodejs-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8969814a3881645f0614d171a6b2fd22cdba8d525d39f3294b68a498f406e91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186960 Malicious code in fetch-ursa-vega-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0d636c0752eaa2b5ba9b87b8801329c119b834f1e4a4d5790878fed205c0a6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187919 Malicious code in mantle-galaxy-vuetify-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27d095cf3f4227e38f0e854fa3861543aa352678e355ebee87d347cda3e374fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186203 Malicious code in colors-eventhoriz-react-bootstrap-zooarchaeology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa0400d978fa965e52d12202d981d0a00f84aed877346a6ddbd17443b12575da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188375 Malicious code in nuxtjs-quasarjet-cross-env-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector facc075dd9444f2723af86599f1c0a112a283b2d101a025f16374e4e5a91ff5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187570 Malicious code in janus-enceladus-supernova-panspermia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c0d9eacb602968519228c53fe632ffea01a20848339c1332b7c1701c9be4f96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186426 Malicious code in css-minimizer-webpack-plugin-vuetify-ichnology-redshift (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e51432f68b706b7ae7c14c4afd85ef5068b6383f1eb97bea5a751ea91677a542 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186935 Malicious code in extremophile-slidev-radioastronomy-coronalmassejection (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caabac9e0f1bd1f9c12cdd709f620e7c1e8d2e0b6ee9f0e3e16f1553227dcede This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186882 Malicious code in eventhoriz-perseus-semantic-ui-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36c8dfc94f09b2035ce23b897ae3ff76adb7eb115168d013c0bbd9b08398fa8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190367 Malicious code in xenobiology-technocracy-dotenv-safe-brane (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38f1940ec494c0d4680f56338f595cc22c7b88792f2adf2e663d5b3246e54920 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186377 Malicious code in cross-env-atlas-non-blocking-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c136167139e7da8f2dfa597abcb7ee932a4d5968c1f94382ea87cc5b9e43128d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189764 Malicious code in supernova-equinox-singularity-robotics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67f56679cc22b11e8ed02364f4ec1180760f81d8fab695bc66756a0de7aee591 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cosmicray-draco-interferometry-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74e5c6911b77d8405e431ac6d9229df453c50c824c01099cc54520e00d557257 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bootstrap-forever-uranology-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2670113820a8f2a2c46158eeea3fbec418026540f0e9939b1e4f110363f9c9c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in registry-firebase-bunyan-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82d9b7fc7f6514023a049e5263cfac52ab080b751f5f9d2fad7965815713cab6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in array-eta-sudo-new-cron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0a4d7db1a4925cd12f0d1da43bf11871460b9b935303fed31be0b2dea06c595 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zephyr-ganymede-fomalhaut-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 400d2c278a0302d618f65ae002e9c82387d30f08742bf4fd5af0b01c9082a40f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...