MAL-2025-190231 Malicious code in wasat-cosmochemistry-nucleosynthesis-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ebfd3a537468dba057e040fe1e211e8bf0580033d12436164ebfafd5c30b736 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186495 Malicious code in debug-char-code-double-encode (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf04c663a92261e5204471a60b4f4195cd06203bbc747e721e88d638e35efbb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185417 Malicious code in aldebaran-markdownlint-phoebe-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d2eae2d4d24b716dcf27519ab4ec2afb1dff648a431341b81fc253327556c6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187975 Malicious code in meissa-polaris-pulsar-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55be14a3895b75568b753b0dbb7e610f2c1ea7657cf1dbb55f0d70db002b25a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187355 Malicious code in hexo-publish-hexo-xo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d00717e5974b423da54268e70eeedbebfd4bb4bf7ee91f3dd7e0b29ca6d88211 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grep-pi-final-interpret-cloud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5422369c9543fe29291dab0ecd21197d00e62b593a25270abd1b25736f3bec0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189241 Malicious code in rimraf-betelgeuse-baryon-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3aec160d4f2115fef5d041bbd82fe690b367aa8d2bae4e68d3c473c1e8d806a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190000 Malicious code in triton-proxima-impulse-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb012bc8032df9bf8cc5ab1b784df443d93d149bc076b6fdfb47b22dfbaf7b9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in orogeny-karma-babel-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bd1ff628c7a9533aedbbedf75824f88072126471f9c3a012e94369c391516ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190056 Malicious code in unix-earth-zero-decrypt-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 104f65dbb8a50faf4807c98c86ddea4df1e228f34b5b687aacbe3f6286776b06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in draco-convict-carina-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8ac39405d373fe12213e8d3838763c38a7674b0f4ecae50d5bc7ddfdd67f77e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187918 Malicious code in mantle-asteroid-charon-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc19ae5a48a8eeab6ddcda9393877d6e8a6501c2de85c903efe8b1735889a1dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in virgo-joviology-proxima-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65fb535baf3318b23fa0b62b4cd4c5683c8431b361755d1cb4e8290c76a46c59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oortcloud-lint-weywot-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40d83fa54dbd7344ae559a67215d8e07f68ba8db150c8a908627d3c1b7557392 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prettier-stylelint-astrobiology-loopback-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6defb2c5feb096989f260b8521f3669e9671736f838b9e562297550bbb18bb7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187190 Malicious code in good-chi-nu-info-hash (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f42b6bf2a01b6334b369bee120683abc5377dbaa3c0215c6a61aa6e01154bdbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chakra-ui-test-quark-astrophysics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f7da34d62a5c8298da9cb0398d30b6ec22a9f5f88682ffbbef975d1fdeff375 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rocket-eleventy-alphard-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08e513a76e72e1fca6eec63742d1bdca68ae829e5cdedb6e60687eab86480607 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neptune-node-sass-altair-membrane (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad682c7ef1b00daaed7b6861c4172801654dbd52ae27354ba342091db9601ad2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nova-virgo-jasmine-redshift (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58861c5c536b49fbdda4e8bf495e52ae8eea5685b547b5cb54e6d2c7f17b20fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...