MAL-2025-188637 Malicious code in perseus-xenon-grus-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3dba22527ed8f27d29b6a277c13c56373df6604a117eb21a0e723a31111238f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190446 Malicious code in zenith-cosmiconfig-miranda-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06eda7674a79fee6c5be9c0b91dd719af94d0685f5badfb5a22f5c6411273b28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189094 Malicious code in readable-configstore-regulus-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa106f845b72360c2409496dfe3d10196e362e64b56e8b6839e6b3c82bb06a32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187097 Malicious code in gammarayburst-remark-boson-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 189eb1d8deef0058a6d5b3ebe8e29eea889830c8792bb5de6f7daaefece15c2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186736 Malicious code in enceladus-quantumfoam-markdownlint-lightyear (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9581fff270fca351536c9fc917d7d441c7165b0aafae91631d5fa9c002c18fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189173 Malicious code in remark-dorado-coronalmassejection-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c257d759eba4d91017038da2f152a2aa335339afacb98736807437b419377fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185467 Malicious code in antares-jasmine-rocket-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4aee983d1436336ccf9ed5669ffc4797960cd6c4e50b1ef18c630a481685241 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187397 Malicious code in hydra-duplex-npm-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24fed9db6f3a16972cd99dad61d1dcc7b283267059869c88c31951910c5dc518 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187810 Malicious code in lint-nuxtjs-babel-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a8611eb2223c19e3229ffc9e93992299b19a837631cc58ec018759f33681b70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186707 Malicious code in elektra-bellatrix-neutronstar-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c4f90b5692e853c91bc5bf63fb6ee8aca89c7b606140be3793dc608467693e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187328 Malicious code in helmet-sagitta-saturnology-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8edf752315cb247edb6c5969349b45e0b64f798bc16720b9f806ee1b68fad823 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188032 Malicious code in meteor-singularitarianism-procyon-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f87e7aabd6edcc6661dabe6c7ba3b26e4096378ffca7f6816c4bc5e8e82a9d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190024 Malicious code in uglify-js-gatsby-mocha-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35678a78049826e95243c5ef05b567ec7a727ae22384d50851840ccd22a90cf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187923 Malicious code in markdown-cz-conventional-changelog-link-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d527ebc303693c9f8e63921a2d125b088cde974feddcfa14b468151078a98007 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187246 Malicious code in grus-private-quark-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d16e13dec01cfb2b4640caf03ff44b0bc81c7783aa0631bc664936909d63ed3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187421 Malicious code in ichnology-materialize-neptune-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8666f837f68fd0df77ff7324fe8ee2c1b1d69f60347a007db82e8cd960b88272 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186891 Malicious code in exec-radiometric-aether-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fed5f2ccdf20d516c56c1c081e10e61f6712603f06c6c1b66622c510df0f55a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189038 Malicious code in quasarjet-umbriel-global-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5107d252300ac72e77d3226682a2382d559b0e1b387c3fc03169b328d0195ca0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187918 Malicious code in mantle-asteroid-charon-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc19ae5a48a8eeab6ddcda9393877d6e8a6501c2de85c903efe8b1735889a1dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187209 Malicious code in graviton-command-global-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 845414344cf37948a469b18b04fe8781a6a8a9e6b92f158967769b81e803f446 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...