MAL-2025-189173 Malicious code in remark-dorado-coronalmassejection-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c257d759eba4d91017038da2f152a2aa335339afacb98736807437b419377fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190400 Malicious code in xml-sails-cluster-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e47d11e94efa1d8dcc50c9b7719f33a12c4ac87761659e74645fc502db56b0e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in command-xo-module-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fd904aec9c3a6c08fbd9825ef68e0a13af99f7a6873004f2183b1f88c4f22d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186420 Malicious code in css-minimizer-webpack-plugin-framework-nextjs-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f30f366708cef8bca649ed0d2111bba2e06d274b44d3c3ffe7f6ccc876441e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186148 Malicious code in chromedriver-hyperion-isostasy-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bba21800fecd9e38da48ea31cc273e421e261933c1367a9330955505b5dcb97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in areology-eleventy-cassini-filament (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba97426e3f33f6de299e1fcfff8dfee76502d5f73058164cf60ca33917a24a22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189774 Malicious code in superposition-nucleosynthesis-mui-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 063fcb24a40b89768bf94bc97149458417097f11c41885bc62e4b401f180fc52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189070 Malicious code in radiometric-native-adonis-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7a905c6fbd44ffe868d328f759bc5e0ebe4637155e3c9cfa9f4b6ec27256292 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186996 Malicious code in flare-ignite-graphql-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b3ee76870be82d97f3eb5d63d5d9fc0339e9009a28b02be76c1b4a0f44944d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subduction-cosmology-hercules-cosmicweb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afc0b3ccdb5d612b88871a79e3b368e6cb2575a8afa60d447272da1326f0e84a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187341 Malicious code in hermes-browserify-alphard-greatfilter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e30708db9226924c56d46254043ab17828ef65f1ed22ce45bc6353202adddb3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189970 Malicious code in transform-version-sequelize-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e0b260696b6e01b16b95ea6411e5bdda668fb587ccda3c63e369cde6cd117d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186781 Malicious code in epigenetics-kinetic-prompts-taphonomy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c64afb51cb674d9db30da191e7520afbe5e2a9027ba0932f5a698f2fe7425425 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189538 Malicious code in slidev-resonance-farout-baryon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa5d96a4541e7562f20a9b4fcd284e9207e6c3730ae698555ff68ddbeba4023e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187367 Malicious code in holography-development-nightmare-uranology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a7391f770354c996f96ff917c11fa4926f5234d5852422d6f39e359d9aa7a89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rollup-plugin-loglevel-archaeoastronomy-on (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ae1d18ecda3a4a15013d21d522f0598cfc55b2f622436d4550842dd4870a5d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188260 Malicious code in new-transpile-alpha-log-proxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bc8fc5b7728dce5530f80ccd313b6a0d4a003f8c1b9ef1a197bbeaa964fecf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187031 Malicious code in fornax-jest-ariel-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector feb0d79504b1094ae1204fe3e8908bc1eb45f16d9f0a89e03f7a2f7fc5a0d796 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188600 Malicious code in pegasus-nightwatch-nconf-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e249e84533ba3f5ff5d0be0c07b16886f7c224e9148d494ab0f395877026b2ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in browserify-izar-archaeogenetics-darkmatter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7bf87f0fa9cf2004cd9a8d4f12aed50577376be0a09f2da152e72123b8a1b65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...