MAL-2025-187952 Malicious code in mdx-development-elara-stratosphere (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcc4bd235720b3f28d193fb963d4a38119a58061d2fb460cd83c464444e31b27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188692 Malicious code in phylogenetics-fork-tectonic-cosmology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20cd04db7ff79d34415c4910ccf5f498e218ce9c415f6d4a1e893027ad764142 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186365 Malicious code in cosmos-yonder-grunt-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05ec61cd9ccaae23473fa62ba89bdc0cd77a1cf4c2ad714655057db11196e10b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189243 Malicious code in rimraf-isostasy-algol-paleoanthropology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3481301405182aeda1f115cbdd839ab65c80a8048007b504458f4df9b948c27f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185865 Malicious code in blueshift-perturbation-centauri-paleoceanography (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 841e48167a2e8941ea52d3d87bb92b2dec4bd11e24239da9550cc850ff6ac3d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189305 Malicious code in sadr-membrane-slides-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9f5afa3f0909d32cb9061af02d912fe9587dcc198b2456101683b37f285bbb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189188 Malicious code in repository-reveal-md-multiverse-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de52f7052500891977e9b92278627f7cabde231989ddf59ee96489c8f19bf65a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189004 Malicious code in quantum-norma-canopus-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89cc616e1c86db519ac69507809139300362341a112b7750cd00848d92ec1602 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188542 Malicious code in palynology-semantic-release-pulsar-wormhole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34206c99211389792c4d934032f76e4292094dac40215fc8bc1353575dcefef7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189080 Malicious code in rate-limiter-aurora-helmet-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9633e2fd02710c31a807cef01e13aef312acd495a2495f49441b3006042bae81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188147 Malicious code in multiverse-pavo-dependencies-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5bb86e4fc7d6abeeb8acfe3062856a25e160c76e9ab903a8caa83445b6660ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187105 Malicious code in ganymede-meteor-equinox-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf6caf727d2ca931162dc42199e8135f7c9bc25580dc02019ae90f6876bc9655 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185793 Malicious code in betelgeuse-gammarayburst-puppeteer-rehype (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5130958447a541346c610348c14c00f249776c21a7f1dcc342652db121fd6f92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188995 Malicious code in quantum-computing-eslint-plugin-zephyr-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e88f3f76a14f5bc81391f34d6452a089594d0603cf85c69cdd178397bc3c36c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188377 Malicious code in nuxtjs-test-fornax-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06d5b29631fb2bda9c539656ce905f027cf1e1e09824995f998eb35c2ef8fde2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185908 Malicious code in brane-mocha-elektra-farout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a64e4699bbd0a9043d4f0a6fe6c81a12163af437814fa8d1de4cf1f028f65136 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188158 Malicious code in mysql-cassini-unuk-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9073f9335c1be4ff425490df7e7f081f828afa71bed9769dd505b3c85f82688d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188629 Malicious code in perseus-odin-neptune-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3804f35db4608ce02bd81964c40f8470c16a58a2c8d957175bf051ee4826bd28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186273 Malicious code in config-cross-env-nova-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eec2e3c10bc0dfd078bb269217828be6878379754bbd7321847eb20ddb238aa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185872 Malicious code in book-earth-runtime-delta-chi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ca56a31956e75b2290ebd4b408475ebe5dddc60d039e85ec0ad1fb35dc980f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...