MAL-2025-190489 Malicious code in zooarchaeology-nodemon-semantic-release-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc86611ecc1d408557ed31ce6290315bef498929933479df9f8045b837679a11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185392 Malicious code in aether-mui-postgres-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffda47166b625e26114e1aebf4cfcdf0ba36e5dc18a49ff0d9f0de1b5375abee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188125 Malicious code in morgan-meteor-loop-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70f8ff4fac46120d5c038ff72708bfc1e04ff3b4a1d0997b5a208cd5adfdcf26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189835 Malicious code in technocracy-neptunology-entanglement-whitedwarf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a714060d334a3130ad7599f72fbbeacd26069ba90c6a06c2bd81ea9eedcf8e07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186877 Malicious code in event-miranda-rest-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acccf89c905da91626d03d95cb26599e6d673600757370009e4ae8d8b0962900 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188144 Malicious code in mui-xerxes-proxima-cassini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1c12bceab74b6419a10feede58b31581319ad3c2259073f79ffd2d6f2445171 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187046 Malicious code in framework-release-it-fornax-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41b7d00319abd576e303397fbe78c43c769e871f30b6725bd501a0203e38c58f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188482 Malicious code in oscillation-aquarius-ursa-parallax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7127678160b96508d807efcfe044a57b7f9a9206a3c2546e146450bed08b547 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186348 Malicious code in cosmochemistry-lynx-ceres-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74ab9a101e57e01b17e4c0f19e62265f783a7a29c6f149b9b13a5069caff247f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185600 Malicious code in astroinformatics-brane-firebase-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90e22d20f7c69d4877b52fb6e6fbb3e952ddd07144b793d3cccb6685f2fe596d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189396 Malicious code in secure-eta-throw-index-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6ef07f6a8d07c9ae7049f63ac2d5a0c363e46cfda057c7eb6353624e949ce2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186460 Malicious code in dactyl-loopback-axios-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94ef9b4077e3c6ce19e631255d57d1edaaaa35e2479ccaad486e1d3e0d6f9a3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188400 Malicious code in odin-mensa-magnetar-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b16d64969c8f5d9116a9d619232f9bfb3cc7ee0898044a3be804b3e30d3f6e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188343 Malicious code in norma-sagitta-bellatrix-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b1a517b27fdb18f2f93c4d6ccbb461ffbef3fc61fe0214cd6f5e371ec604139 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189414 Malicious code in sedna-nextjs-baryon-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c372bfc802c3d8de2a8e6f537654c60617806df7468bb0d8680d7c951323a61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189776 Malicious code in superposition-unuk-spectroscopy-borealis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 447a420e2f7492d5062a141b6b5f5bf8ca06267753ff8c144ff4da6937865934 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189973 Malicious code in transhumanism-cli-superflare-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 039599f02d93393fef55555c47eded87dcb54d3570cdbcd5cf54955e04f9479b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187716 Malicious code in lacerta-betelgeuse-xanthus-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3c6304ec6e85d47dbc95675de68746430ade85ec9fbecf5cad5c5ec8a058683 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187470 Malicious code in ini-barnard-juno-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3dbf5daee4a63bb5da7d2edd25d7ce8d9d7bc3d058330917f28aa7374a6ef12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186985 Malicious code in finally-stack-error-cold-assert (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 851d0023f1b630511561a3a8277fcd85b55a566b9ea984b4ba5f4e35d51eb296 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...