MAL-2025-187914 Malicious code in magnetosphere-hydra-aurora-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d4c280da4088250a880f3beef154d45c9a4bd8505741d2c117a53f840d21031 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190300 Malicious code in weywot-less-meteor-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8542102f9f4ae3b048464b926a5ab26eb49cd534e4e12a528ad808d7a291bd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in middleware-antares-bootstrap-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8413a05fb60698d2bc5a2570951f668c8b724e92016b863ae04b7b1ee7906617 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186267 Malicious code in concurrently-grus-vuepress-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7074c66c67ba8954226ffe4caea4be815b7cbdb15439e2f2e1a589d8eab0e173 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185686 Malicious code in avior-gulp-sagitta-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d74a939914422a428ce54ff6c5a30cc4c419e3633552ab96d352402aa0c4b77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188829 Malicious code in private-sadr-proxima-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e89a93d2578c57cd446d95f50d70864c1820065c9b1d1096f45db5d6497ba4b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189873 Malicious code in terser-webpack-plugin-delphinus-membrane-cryovolcano (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83f1fbd056f464401107ffa949a75c56dc9110b1b201fa564b844e813212402a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187496 Malicious code in install-enif-blitz-supervisor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36141e3666f8c066649d564f1f74956d7c95b2120dc6f9c0abec69c4a3bfb1b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cloud-water-old-moon-wind (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f6319ff7b420cb0dd56f67db0f75f27c89f1cc43360a9ca664fd1a8b8668b4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187954 Malicious code in mdx-kaus-browserify-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c35c481bdc9c3cd04791a4bd2aea3c97faf1ab41752bdeaa06954b53da493801 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187611 Malicious code in jovian-less-loader-draco-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94189a4b8068d471674545d9a9ea66454a1547bf0c8fd73e8f0180d9b2200d20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185519 Malicious code in archaeoastronomy-blaze-panspermia-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74ce19487a2c3093fd4a1524dc20d5246b2f30463a959ed1694fd6e25204a8af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189612 Malicious code in spectron-pegasus-interstellarmedium-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b04eb1d5d63c9f3aabf811cac6a6ce9455d32889b996253d4c4aad321324328 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187547 Malicious code in iota-stub-wind-quick-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 926d033f3f79f78ed2711cf99d51fef9eae637b5fe355e222fd485b6b583a03d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185860 Malicious code in blitz-nuxtjs-cosmicray-paleoceanography (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e4cd9862b70a1a45035e499259dbaaddd1fe11073d087794c76495eca9f7215 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187305 Malicious code in heka-markdownlint-rollup-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3918091bf1dccaa7a82585cf98bba21f487de7dad3e092c4d5f4c7b1b3c7e9ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186460 Malicious code in dactyl-loopback-axios-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94ef9b4077e3c6ce19e631255d57d1edaaaa35e2479ccaad486e1d3e0d6f9a3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187240 Malicious code in grunt-ursa-cosmochemistry-xenobiology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58bccb17c4b674e6159db53f27bc72f3b0aa547f2c6e40f0e3c61ee22969090b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187107 Malicious code in ganymede-palynology-proxima-robotics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 543e63880d502f59f3d0b14c0fc789ac361fa84e5f73d03802527eb7c0a98c2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in taurus-css-minimizer-webpack-plugin-ophiuchus-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f8ad6a47a997ae581afbb207779a8920a2efac4fcd400cab0db5924bf8227ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...