MAL-2025-185439 Malicious code in alphard-fetch-electron-builder-levels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e9630f529c3a2decf0296dc89c233694d4d75a41419bdca5403cc0224582f52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in config-regulus-auth-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 602504708c1fa23065534bfce58fb93eb8c0713426b28a6b5331ac55f1425922 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187898 Malicious code in magellan-blaze-archaeometry-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b6456843a1b49b854dc5aae70087573b45e40560990db8f8c549ad500904828 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189614 Malicious code in spectron-webdriver-async-primatology-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4810ee66c68692cb4e0793f469d0d3874bbb2255c23b0dd696e904d2e43f0c2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subscription-playwright-public-carina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 701a8a346bf74a50513bb9a55b5b268f778f18a886f3f088e3fa641fb990991a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in impulse-toml-despina-bootes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e30ea46b93efbbe7455150310508ae764adf5908598dcdf07232a5262db6eb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187891 Malicious code in lyra-janus-spectron-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f974c1d7489ce1d1c09c87907c9d339d8bc8a156c498f4df32f39841f470b43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190400 Malicious code in xml-sails-cluster-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e47d11e94efa1d8dcc50c9b7719f33a12c4ac87761659e74645fc502db56b0e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186168 Malicious code in cli-module-publish-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e2c574de55331c0e324822e435ebfe908647b9d1b6a58c0006c40ee7959d408 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186582 Malicious code in development-warp-geoarchaeology-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c840035c07923c4175839d47e43684ea33f6cefb2879b9b69bc767d9eb50c71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188414 Malicious code in omega-test-benchmark-validate-resolve (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea4aba24065b552eb02a00ebb3a060d1185891e26c3f60f4a533a8eb264a7b9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189175 Malicious code in remark-fornax-ora-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c243912e669259606e8a9f8f960ecc02cdb7dec0dbf107c3290c61dfef328cfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186056 Malicious code in centauri-xenobiology-prompts-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1465d9ba39cc1b669215a53dc40fea20e44322f438f590b0c84e02c9abeab89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186177 Malicious code in cluster-child-process-remark-hadron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0174842527c29694de08b676a8177ac52e03dab4a1db27c0edc59945ebbb6a8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zenobia-nightwatch-rigel-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7808ebb551c621154690455d041307a57992b39f029c79ff41c3100a0a06b108 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189042 Malicious code in query-sed-hash-mu-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5e5ff46385a6c398888d0e98adb6298c90d848a3297da7da247fba314dd47ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rigel-miranda-cache-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f24d18ebd38c79524545d193434c68697eb21e47a21abb2e7f108ae969d00566 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186083 Malicious code in chai-prompts-auth0-geckodriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad324c4ea61642de7103f9b9dd8dbcd82c0039694bf830c253f7ff3fe81db1ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189137 Malicious code in regulus-publish-development-parallax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c17bae7c1a59f02de91c2d1c418543517fafa19edb0baa99326196854a677b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188325 Malicious code in nodejs-csrf-sagitta-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55b4a0d0f7ff3dd984df6f9575fd59892f7044b99a492bdad2834ae0362abd51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...