MAL-2025-186235 Malicious code in command-pulsar-atlas-on (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72b38ad021b2edab7a1022fa57221eefd500f88a7e7cf7d45dffc7b50ed47d2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186999 Malicious code in float-beta-deploy-star-meta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c28ea191cc624187c918a5e511152ef7fdd4e559f69dd061a432e823a1547cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188977 Malicious code in pulsar-selenium-oortcloud-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b9c392f64679172f81a2fc6e79ccf979dfbf3879ed0696eb339f8e1a4219167 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186709 Malicious code in elektra-supercluster-genomics-heliophysics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 151aa85ff2dca1946cd00a3716ecb72519fd01ae04977e10d71f8a48361320bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188919 Malicious code in proxima-shelljs-spinner-brane (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f7bd32ce89463fc87f2bf996cd96de28e6fa265c87a586e1414a63e912a88fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189712 Malicious code in subduction-pulsar-yaml-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fdcdd77876d0905b0625c6064e91a7bcc7cf4dd76d43162bb3a86d9a6a56da5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186203 Malicious code in colors-eventhoriz-react-bootstrap-zooarchaeology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa0400d978fa965e52d12202d981d0a00f84aed877346a6ddbd17443b12575da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188917 Malicious code in proxima-ophiuchus-geckodriver-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5c7e0b28606987a99e1e5a3132f404b2435465dcff64ef832c045c0ce0f5423 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190051 Malicious code in umbriel-transform-corvus-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba0535ab8475a2cfe19c1ada68feab5732883367dc7554d2a673d0616d955ddf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189298 Malicious code in runtime-short-fork-yaml-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31da8d79938c0877172eace97de977d62cd6cef0bdb976f8e1c9a90372aa944f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189583 Malicious code in solarnebula-betelgeuse-mui-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d8de60c105978945920dc38697ecb14795c8f5a537a62627e59ecee7595ac8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187722 Malicious code in lacerta-style-loader-mini-css-extract-plugin-less (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 222914e44e98bf610164e7ab4d3b3240a1bf355716c59e8661864f5d3de0ffc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190140 Malicious code in venus-phoebe-heliophysics-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c557360705a7b782a60c0b57663064bd571c2258f3504b22e00fdd91e865c3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187944 Malicious code in materialize-magnetar-paleontology-cosmochemistry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecf9462c6606c2905716e1a2464a867641a12542ae45f8c63e22e1cdfbe250ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187804 Malicious code in lint-cassini-metalsmith-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b4b2a23fb9c62a119ab9c0e8750246e8d4d015ca5b2da5e50221be5da0c3609 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189579 Malicious code in socketio-polaris-restart-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e80f723fb0c38fbfaf0efdc1c70d08acd508343dbd594e403fca9751fb9b1719 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186354 Malicious code in cosmology-geodynamo-blaze-perturbation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ba766eb5f32777db3374986c46fd236e4668d7897069846749971a67037b8c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186194 Malicious code in code-interpret-finally-decode-cold (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bda77329400e2d6d937de5ec4642461363583de5cc3bc09ba36c5270ced52d51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188086 Malicious code in miranda-yildun-zooarchaeology-bionics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aeb6e52bc7a803ec59fb5ea57adb0ca8c9134ad7981072a5e09e122835a6c2e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186184 Malicious code in cluster-sanitize-resolve-omega-encrypt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcceef72f7076040ad3f53d861981ebd1e83dc7bf7e6c4bbd7c584c0c40e5a6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...