MAL-2025-188208 Malicious code in nebula-outercore-promise-lightyear (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66069e88859f70dd33e442af467828063afd118ead677224c580a78b092e7d93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188481 Malicious code in orogeny-rollup-heka-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cac2aa4d52d33a2c0663b27d957a41078e32839e0baeea1706e56f1211962c86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190066 Malicious code in unuk-gatsby-dysonswarm-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f84f98dd91a2ce134aab93b6d61ef65104da91ef0514bfa2d9358081ca7f0ac1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186057 Malicious code in centauri-xenos-phoebe-heliophysics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc23ec470610be833e796362f1c280af48f60e336558cd532a2841ce205d45cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186529 Malicious code in delphinus-run-script-deneb-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1febe7fd885b5c966dc69cd19fd2a810edb9ee8173ed44297bdffb35acb7f615 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185386 Malicious code in adonis-cosmos-eslint-plugin-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f51440d13be3a94db6138efdff6d65f7d866cbf0118a7f11859f4508a808663 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189815 Malicious code in tau-float-string-reject-byte (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a0f892c15a0fe0c03ddd87d3d7e78aa84b5bf8f943daefb2a16fe2421b23957 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188478 Malicious code in orogeny-fork-query-troposphere (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c492b47b53956d011ee186610884f977d3c12e41fc55e4512fa5e5ac20842815 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187030 Malicious code in fornax-janus-fusion-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b0fb880a3bfb6b4d32d650b9778f2bab22b66cda0b72f0639a80bccf3fcd8cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187063 Malicious code in fusion-gammarayburst-magnetosphere-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f8f77eac23d4f77219dc3dd38e3e9549d7347f9797f1f0094e9a201751610b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186983 Malicious code in finally-function-boolean-refactor-runtime (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ee4d596d3d5de9024b75ee7f595262969bb1f126b1d3cbf2688b216df11c2f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188727 Malicious code in pipe-virgo-perseus-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9eabf39821aaededf090315d40c3c4320f647abcd27814fa1d3d9f16e2cdee3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186573 Malicious code in development-child-process-npm-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d30eba4265fb685fe49217880ad4f843dc9e946728f6ca2e2029e0d23fb573f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185854 Malicious code in blaze-transport-eridanus-singularitarianism (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 132336594566f83353e8d26153b7eaa947954f4e3280dca688c1d21777f60534 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190286 Malicious code in webdriverio-wavefunction-publish-asteroid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dbd476dbd24f90f40965c0167d1e0e9d30a48c5075ce0ffa548800cfeaf17d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188529 Malicious code in paleomagnetism-playwright-blackhole-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a3ac923ef3e0b0386e7575fe8798cedb5b699921978d28e61fc8bdbe8f8eaab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189133 Malicious code in regulus-eridanus-meissa-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe9ebcfb13b4dae50d2ace3ef1ea735b3f71d9f8e886e7583a36ccfdac361cab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188766 Malicious code in polaris-playwright-optimize-css-assets-webpack-plugin-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0153c2925946fa33f509a7dc20a6a22715963f52da756ce161ceb18165fd23d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187361 Malicious code in higgs-markdown-pdf-kaus-helmet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93ba62848a1b93975d8782477b6f4ac21636b1cd955646b801e68e663f18d5fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189323 Malicious code in sagitta-sublimation-sagitta-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83e2a7905411fa3c3c282e84c3043f3fc0041b82e10ccfc9e96809d81d82757e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...