MAL-2025-187520 Malicious code in io-cordelia-meteor-filament (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37bb443e8b535dc59175b1ef8d7eb72d284f31f0b56ff72943312cddcb025736 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190073 Malicious code in update-astroinformatics-technosignature-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07872498943c814fce0f1daf16b83559840c78b50781df97768c53a52faa9bac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188878 Malicious code in prosthetics-janus-cosmicray-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bf23841069f26bd310036a3ee4214cbe31bba389517fbaaf7c661280e69a65c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187261 Malicious code in hadron-vuetify-astrophysics-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a023aa918b6df89cf02b3fb9cbff1e261dbb97330b127160a907246a48e94bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187925 Malicious code in markdown-electron-europa-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da241035c8c6043578692ac4ee05dd47f6b4d6d0a9301ddc80f8497055acb487 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187975 Malicious code in meissa-polaris-pulsar-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55be14a3895b75568b753b0dbb7e610f2c1ea7657cf1dbb55f0d70db002b25a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186027 Malicious code in cat-air-xi-slow-visualize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fefed3200aae9b03b2b7c8bfb5a00098ddc2ba15609c9a4286de08a7b8603e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190221 Malicious code in warp-elara-leda-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bba8246c9cb10c6c1adb2dad15906b9bbbf45d2841b4b415083c739160e1e80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185693 Malicious code in await-float-optimize-route-omicron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8e098a6f9822425661851047a431e132cc1cb8d102b241a0dd8972f13b4bd22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187288 Malicious code in hawkingradiation-aether-mesosphere-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b33677574330eb0f97322854d638a9210badd223d764bd7216dd99dbd4dd9d14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186077 Malicious code in chai-got-pino-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d4038eb99c7a3c61857cd8ea91f7024e5f1510152d4f3c6577ad77a0bfbd3b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186550 Malicious code in deneb-parallax-aldebaran-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62fdac9fb115059473ddb39de7308936fb34fee96693299f3e1aa1c9d0719d33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189620 Malicious code in speleology-phenomic-nova-resonance (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0964688b47d97de3d008dd858b6c40cbbefa462b69aed624467438e4722a340c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187995 Malicious code in mesosphere-query-dynamo-uranology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ade0f9fd45452062aac0899a4880a860ceef294caf0210e74d81e62b34c6889c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188038 Malicious code in middleware-css-loader-eigenstate-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 534a9e81e6c2402ae393adf28af59d4b379d1072ef0b71622fdc40f5080ab7e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189984 Malicious code in transport-command-tachyon-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0edf236c6cd49684316b7dc0c0aa1202a6536332e740642610fe27705c86625 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190376 Malicious code in xenon-sirius-scripts-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc59bb199e537098aabd62f83528d0fe807818af58acb052a12b5198cddd98f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189542 Malicious code in slidev-webdriverio-geodynamo-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e40b8ef2ca4a1c55c75b881b2d9d0b2cffd2b53d5be554752f1411031b944caa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186312 Malicious code in coronalmassejection-express-stream-cryonics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cb7ccafe494f15bf19a6e786f7e944326261f0edda3cdef4b98fbdf9710c04f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185528 Malicious code in archaeogenetics-tardigrade-filament-boson (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9224028552e3b7dfa507b6d9c04414e4fc7c9633163fa4ca6c51bf465fb5ef0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...