MAL-2025-189764 Malicious code in supernova-equinox-singularity-robotics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67f56679cc22b11e8ed02364f4ec1180760f81d8fab695bc66756a0de7aee591 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188342 Malicious code in norma-quantumfoam-loglevel-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21ed2698692112dfc74b6f02911353f2237a752abc9c7550f33631d1e5f59620 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190462 Malicious code in zephyr-eris-spinner-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea671283f01b35babb5106204769694d41bcf70685cd9e595382d0728e80f627 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187908 Malicious code in magnetar-eridanus-middleware-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ead7461c3d12da73b3122b7ebabc893dd659348b18da148e543e262a5a0c0c27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186501 Malicious code in decode-info-new-finally-new (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3950f1595598eee2e1fc0c8562e4c8079ca413a304be306695f1846305db67de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185643 Malicious code in augmentedreality-frontend-cz-conventional-changelog-neptunology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f8670d124ec65024366529e678d71c9c6e75aef3c338716d5991bb1f5d1af36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188361 Malicious code in npm-equinox-bootstrap-baryon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cce8e42fb255792dea3c004dee600372b6a26818d5701f1978618438d6cdad73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188744 Malicious code in playwright-quasar-tachyon-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29e1811086e60f8c2705e4749e9f39094f5019189effbebfe1ef6a7c767217da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189411 Malicious code in sedna-geodynamo-holography-paleontology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 161eeb2af5e07a48c3afcc0c4cb1ffb743e291005e4a004fc3d14e91464f24b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189328 Malicious code in sails-dotenv-adonis-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa31083ce72f58be06ef61827800200ffc7fb0df078a978047d564620b116b79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186261 Malicious code in compile-xi-small-star-decompress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4093c99a795c5f49e5a473608bf2cc7fec08c50ea65fd9dfe7bb1d5937deefe5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187091 Malicious code in gamma-good-socket-enum-route (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31fb8ce741f087b55ea1186167a688e06a6393fa56520189107a29c13cca94fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185786 Malicious code in betelgeuse-antd-magellan-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bba981ed499b399f9a3ec1b2f5c6d1ffc81ce85026281fc7b86016b3732bd086 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186855 Malicious code in eta-psi-await-sun-upsilon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8e359baf44a269b2db394ed9a2256f320bf4de5b0af2165d64aca8bb9522f5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189436 Malicious code in selenology-tailwindcss-cosmogenic-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8930f5ec5584cebb34ad1297b7e483e8cc42152b117d3b097a91ef8766b46289 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189936 Malicious code in titan-despina-zenobia-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae5ee25ca20a09d9abb7fc1a6d770bb3c601cf9ddba8f4d1880abb62fee026fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186075 Malicious code in chai-blazar-quasar-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 128176b0ea3dd4cd1df472e8b25d1a0d98e84d2b8f1a03ae9e5ad8efb29eeab1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185926 Malicious code in build-enceladus-supernova-joviology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2af451850fab8801d34120d211470e5a231805d70b0ce5794c0fb4df3c2cc966 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187175 Malicious code in global-apollo-dysonswarm-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8624af2234afa89e899457b5b5c227d1c1b09212d1eb8b2a207d466c14a8b2e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185466 Malicious code in antares-iota-mysql-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6b745a215730f800ab23e41a575eb14af8482a22bb5b1a6db13350db681a93e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...