MAL-2025-189850 Malicious code in tectonophysics-sequelize-whitedwarf-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6a418c5c79fe80c62d72488d51e495118660bbfd475cdb942da5cab826ad3c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187342 Malicious code in hermes-child-process-apex-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a281ad403ce48fe80ffae106c96e750395afa994deaa511034c881291b3f006f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in java-simple-void-fork-sudo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a431fd38fe81d86e10d39de2b0de5f9e1d478535958d3b4f6dd4350bb47db014 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in biomimicry-kuiperbelt-castor-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cad2bcd54635313a28e29d24a2fc5ecca38fe189b939fa57f7af1e460466698d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189049 Malicious code in quito-cryovolcano-nightwatch-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01a24e9acd11ed85f87985112d1bd7cc1e77631e7593134f4b3a95d72977e303 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in decode-export-data-cold-error (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd9b26936a91296c9761c1dc1f244b37d89f7f0d0479753627dfb42acc4420af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186258 Malicious code in compile-catch-gamma-encode-resolve (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b8545b272f2cc1d5247f5d8fc850fd0c53e182c3852a6ab567e2c4e0085d24b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186145 Malicious code in child-process-loglevel-elektra-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04f1f20ab80f61e2c11b6e61e7bd034a3429aa7f420a51e4919dc9442576a50b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188705 Malicious code in pino-pretty-kuiperbelt-vulcan-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d01b3bf19da8542bfc975fdfb7a80d55b99366b0702f190de1439f1a90fa5fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meteor-spectron-webdriver-ignite-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7825fb698098acfc9237bd9d71a9037ffc59b30a8a2d44a9f74468e7506bfceb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190280 Malicious code in webdriverio-meissa-terser-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b8566a6641887982db2205f4d70303c4107005dc5398a21da2d4cde72b86274 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in paleomagnetism-dysonswarm-async-remark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb17dc6d228c7901b9fbd0e03461feb58c1ebda6de23469bbf3f76dbcbb588fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-astrobiology-xo-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 209bc773fd8267be72905b2255aec7ca34c777cb43cffc9a378f21758053dd22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185450 Malicious code in analyze-catch-load-nu-omicron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ca47135bf85c2da7bce49e90cf34cd26d4a117d13a0348e3b07e6971308d220 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190259 Malicious code in webdriver-manager-cosmos-mongoose-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40fa86b786f980c3c1320b01efae8acafc5bf76d1ad8447eb7724e805a945ff8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188254 Malicious code in neutronstar-regulus-sqlite-stratosphere (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cd76a2dd4b6f1c8374b68d6f578a4c53895f8cdc8fad0504324a71a8377a5e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188144 Malicious code in mui-xerxes-proxima-cassini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1c12bceab74b6419a10feede58b31581319ad3c2259073f79ffd2d6f2445171 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185634 Malicious code in async-yonder-void-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74902e60ac1a681b9bbafba9c3e430a5514f29d315ffea6a347310693dd3d057 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in norma-tool-stratigraphy-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cc0d54c69ea8d5d3fb2526b4c3613bc17ab6bd6c2ce8287d64c44fa51ff62cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186199 Malicious code in cold-hot-beta-log-daemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9a7f8a4e041fa30770c77c28ed0ed77e8a0b512d546aac9d12dff4a25c02072 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...