MAL-2025-190131 Malicious code in vega-cypress-miranda-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43dd448ae4158d3d2faceada3991d666141cdc96317313f34e86b4d6773a6daa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187200 Malicious code in got-loglevel-ceres-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b2e9f729f99ce1db8045e28e7e2b5344d4377dd1b1a8f21d8fe39d2c57b0dbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186295 Malicious code in convict-axios-cosmogenic-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 699479996c8d027d40da1208f7afdeaf9a940ada10a45ce700f370a485dd9203 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188919 Malicious code in proxima-shelljs-spinner-brane (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f7bd32ce89463fc87f2bf996cd96de28e6fa265c87a586e1414a63e912a88fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187089 Malicious code in galaxy-xanthus-perseus-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b08463d8094a6585daaff47afc0c7e17fb1cfeac54e21ac5b0da250cfc368e1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in local-astro-inquirer-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcd3727aad6507bf25f15d7e399ff05fed2cdd7bb502e484039078f049b94ced This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phylogenetics-elektra-mocha-cosmogenic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 437166631acc2b4df5aa57d21152b618ec74af118a1652c5734b01ad1e7112e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186882 Malicious code in eventhoriz-perseus-semantic-ui-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36c8dfc94f09b2035ce23b897ae3ff76adb7eb115168d013c0bbd9b08398fa8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190448 Malicious code in zenith-registry-materialize-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21e56cf6f9d386fc0387e7eb45edbcbcbfbc0d7739f3829b7448f383ad832400 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188571 Malicious code in parsec-pulsar-areology-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e83728336db821db8e3edfea191f300647358c704dd0e05a3ef3a4999fadefbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in transform-galaxy-writable-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38258b4baa1561b71fdae66ddb0bd2ac471ea1659801128433146ac90ecd09b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vega-cypress-miranda-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43dd448ae4158d3d2faceada3991d666141cdc96317313f34e86b4d6773a6daa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189328 Malicious code in sails-dotenv-adonis-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa31083ce72f58be06ef61827800200ffc7fb0df078a978047d564620b116b79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190456 Malicious code in zenobia-sirius-paleoclimatology-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 589c6cde9bd310194e1d28c17c9a76b68d2af512820dc8f14c3bf6068c946525 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185549 Malicious code in arcturus-run-script-hydrogeology-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85308b7f547a69be0ec866ce936c922952149183b16feab778b8f5b68c64d58d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187187 Malicious code in global-schema-unuk-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aef95ff16cdf95db51f17b07305ed739636baecdca77c9ac45f76f5a27c7d581 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185480 Malicious code in antd-style-loader-miranda-uninstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd3f4f91bb59bd776abbd17036b4b81e568e06959ffa1d211ed85c33a064cedf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arcturus-centauri-iota-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b062fbcc4e77a805c34328bb8e4095c779c20a7fe585cf258b619b7029d33cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188265 Malicious code in nextjs-octans-interferometry-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81ffbcf6edd07fde0a671041eb74ddf8d1620fe1cb6147cbee37b45eba572519 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189441 Malicious code in semantic-ui-redis-dendrochronology-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8d86fe46479392a59ae1b6014000b1675286c6ae85a50c9f04470b1d5626df6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...