MAL-2025-187779 Malicious code in library-frontend-update-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed2e4f376bb17f8ffc87980fa0da0d846405540d49493c4df426758297bec270 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186510 Malicious code in decrypt-sun-mock-rain-debug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2d06f22646305412a369e98d2bca79aa51a5c48223ec3e26e326ab67cb75d6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187428 Malicious code in ignite-jekyll-europa-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 816aa5bd2dc7b19100deec4058a3379694413dd83819569d46871cf95c7b471f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188797 Malicious code in prettier-luna-mysql-stratosphere (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3222eb9b99d6842ecb63911c1a6c1b490c2c17c005acfe908b74128d7328f962 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190180 Malicious code in void-grus-superagent-planckscale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20a8a9fd08defaff05f5feabf694f5b971ed1904512ea95cf7ae5be645b34d64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189838 Malicious code in technosignature-eslint-plugin-deimos-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59655cd4ef955dfbcaad401568c4eaa54de4cf841a6588794b7a680f8c055fc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185505 Malicious code in apollo-nodejs-helmet-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03f8efa0ddd24ff187a77bfbf2653e94f12a622525a7c6ac90cd8bb470c36f55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188563 Malicious code in parse-array-slow-emulate-notify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79730effee3d6d0c7142b05c594c736477c5c548260feef0b81f2fa621df42c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186702 Malicious code in electron-nconf-callisto-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc90748ea64a281a778df79da5f5d78d8439ba2ac5dd54761b15734e56d7aac7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189076 Malicious code in rain-interface-java-bundle-wind (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 861caba75a2a254135ada995aca02170f3baf8a663c283e579f73bb112d4f59d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186880 Malicious code in eventhoriz-futurology-event-chariklo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c96777a755a8d3822d329b2a9e85b002427023d67467caa7f45bb2d7653b76d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186794 Malicious code in equinox-blueshift-exosphere-tectonic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb960ed72e6f1d7c175342151d10ecb8869ecbc7a1b0cd3a820b2a7d7918ed31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187168 Malicious code in geomorphology-cressida-sync-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11711063a044e5d7e1bc0cfa7de9648f003912b46d0a0be5861aae49d90d7d8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189674 Malicious code in stratigraphy-archaeogenetics-pino-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c8b8215edc8d75314fd70706553211c18d60e357ddd2ba33d98c9aebc7bfc32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186107 Malicious code in changelog-archaeogenetics-mini-css-extract-plugin-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43c89b3115fa6923864030d78898e8602e4c6c3e8398a4d8729c6a880b206927 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186538 Malicious code in dendrochronology-eslint-plugin-andromeda-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c24345b9ae34655a19ecf0ebf2bd34e7ba0977ddeb6130cb2b356585ae554d64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189783 Malicious code in supervisor-winston-superagent-exosphere (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c074d6bb8981f905b8fa46ab7436103cabd9d9c9259190086e0dfb4dea7f3f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186236 Malicious code in command-react-bootstrap-neuromorphic-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 534a61a35756e1f7ff0d122533cba28a8dd16c76c34405da0657bbd6de091be2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189969 Malicious code in transform-semantic-ui-eleventy-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ffc4d6e7b72b0aaa2abde280bb586981de8ed65cc2174a163599fb04f6fa777 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186449 Malicious code in cypress-phoenix-higgs-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1790af97737c369218f83515854c87aac6243d0a77963daa49b5f8de55a8d564 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...