MAL-2025-187914 Malicious code in magnetosphere-hydra-aurora-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d4c280da4088250a880f3beef154d45c9a4bd8505741d2c117a53f840d21031 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187038 Malicious code in fornax-transport-webdriver-manager-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 221b0df03709f994b5ba17d503c03bd119a376ef0490fc537e74dc1413048ccf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187022 Malicious code in fork-playwright-joviology-accretion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe5a06ef42fb5690b924816d514ae128fa79405a6dcdba484271ffaa84790c26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189615 Malicious code in spectron-webdriver-commitlint-apollo-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2f9393dc8a7a4eaa19f6f45d6cfee1f7b390f6d38c9d5c9e9a13032f53e195c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188661 Malicious code in phenomic-terser-markdown-archaeogenetics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e13a9d7b5e5952c9e0e3739c59d67083e0e9be60d192f6c9be7f735b5ca17d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188141 Malicious code in mui-neutrino-nestjs-stratigraphy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 729cb919a6d87c0b891badd0fb0662a70c219e865dc84918201050bdf454babb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190341 Malicious code in winston-tectonophysics-quito-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2f06d81e7d83e7039c2760e0d5791cce70c1b5fde03eae9b55bc078641ea538 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185486 Malicious code in apex-archaeometry-darkenergy-deneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17fbf29c20953f8765d3fb38fa3766d60cd3a81a9145f69bac1fe07e0fc616e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185398 Malicious code in aether-tachyon-geochronology-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97c5712385fa129477281e98cbc714546f1b33bda214810ca0805130a57eb58d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189256 Malicious code in rocket-dynamo-supervisor-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80b41f5a989473e5be9b2bc5751e31d7d24fad060b49d6606c000ce2dc8d72f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188185 Malicious code in native-rollup-plugin-sagitta-tectonophysics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00d49cf4e544253b65eeab4ed53118e7a101dca71f9c8857859e37df800820da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187070 Malicious code in fusion-steganography-tachyon-exobiology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16231dc3a37859ca38718acbee5374328b5cb6a2a4f63bb4577fc051dc2be239 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189048 Malicious code in quito-config-lightyear-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2774879e2c0a7ce0d979c45203cd24a0201a338f4a913577244ee6c095d46e02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186493 Malicious code in data-virtualize-cluster-view-phi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 936ecc613606a259a3d77f4c7386303bb0f2eed7f53fc811c049c825c25778a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187420 Malicious code in ichnology-eventhoriz-grus-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a51a1a006f545ebbe51221eda4a9f42a389b1bea53ee46c760fbcfd9929a62f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190035 Malicious code in umbra-australis-dotenv-safe-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8bed70457fc263e8d44f6273717090c9025bbc2a70a05504db3aa29de42573e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188718 Malicious code in pipe-final-tree-emulate-byte (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64fa14cf34816be7e5742ecb67c383a8fd18fb3701f2d19930c2a2906e208e03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186013 Malicious code in cassini-html-webpack-plugin-loglevel-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c9033f1763d5ba00b031a7c88ae9daa1fa6d813e089bdadca8c7150998d3917 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188170 Malicious code in nashira-betelgeuse-astrometry-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa2786725101eb80281d006fa25c4c0f3dbe25a6cc1a67c411ded90ab4425df5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186148 Malicious code in chromedriver-hyperion-isostasy-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bba21800fecd9e38da48ea31cc273e421e261933c1367a9330955505b5dcb97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...