MAL-2025-187103 Malicious code in ganymede-mesosphere-nconf-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2af4634773d6339bd648044a98daab65c71d1ebbec61180c9da28b8315ea6a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186152 Malicious code in chromedriver-spica-repository-epigenetics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 644a4c64a13ccff013904a32793fb2156d58bed4a7842bf67f3e452e2a8eb050 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189897 Malicious code in testcafe-markdownlint-antares-jsonp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb416541db246687e8679b0e1dbca3a372426705710771e12da27b8eab1200a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187783 Malicious code in library-update-commitizen-jabbah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97f9907c91e0e0fd8eb3295044a11a6a9a0d6513f2fc950b21059db2c7ec5b53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186104 Malicious code in chalk-steganography-europa-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa873d12cc9e98d60b4d9b9e019ed48bc303d6e15fd979722da154321653dd78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187346 Malicious code in hermes-polaris-regulus-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce1d1acf4b526b1c21a011aeacdc9ca429c57917bd730015f043e99c0c34db48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185855 Malicious code in blaze-transport-genomics-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a961479210925383a0fbf886ccf1a83d0b482d132a4cd67413a4ef5bfa053292 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190060 Malicious code in unix-zeta-star-execute-uglify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c33862756501024f2e8c14ac92df950c1c78a5d1a0d95d1979c172205a8430db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185755 Malicious code in baryon-perturbation-javascript-pyxis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82e3b91264dd6978584ccce3d20c13f45009b8478f3c69fb0ec077a6d48a37fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186783 Malicious code in epimetheus-loglevel-membrane-solarnebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3882f96f6ba94008491b8b2d879161bdb319ae0eee595576b6f91e29c1b50df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187692 Malicious code in kinetic-module-apollo-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b5cb804d1f1fc283f2f095cb16ea1efc39e0c5c01069f6c181acce93aa56ff9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187250 Malicious code in gulp-cluster-hermes-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b75be2e9a1f4408daffb548607099533dca2e521294c032121214e57670fec67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190109 Malicious code in ursa-jest-antd-helmet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d33c8be0ca0bb199e1726c8dc39437ee5c00d4402fc8e2a2ea5ffe0b0846ad2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187763 Malicious code in less-radiometric-hydra-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abc59368ee0d7cd8aeb4f95689e120819ddbfff2c7c82266ca7fb17267e694aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185466 Malicious code in antares-iota-mysql-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6b745a215730f800ab23e41a575eb14af8482a22bb5b1a6db13350db681a93e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187919 Malicious code in mantle-galaxy-vuetify-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27d095cf3f4227e38f0e854fa3861543aa352678e355ebee87d347cda3e374fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185813 Malicious code in biohacking-axios-pegasus-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4efdccd5f20956e76e5cbd07eec5aa70ae4c11ead7e25a8d925cd659fd5b4975 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187261 Malicious code in hadron-vuetify-astrophysics-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a023aa918b6df89cf02b3fb9cbff1e261dbb97330b127160a907246a48e94bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189419 Malicious code in sedna-semantic-release-meissa-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23de4acbd096d7b2e9443bc9c267dde65252e7ab561fffd7d05d00627a2595f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186409 Malicious code in csrf-eslint-config-futurology-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5a957fe964ae606d4205b7b03e65f9eb9ed8a9f2e081d535bd4c9c5b04b283a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...