MAL-2025-188842 Malicious code in procyon-cosmos-mutation-pyxis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b5dcd12fa5035265d7d32f99a552f3818f4eb9981fd531d05e5b06531dddd17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186580 Malicious code in development-postcss-loader-webpack-cosmicweb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdc7d279a0f29b5bca794be3e6921a4e2c28a76db57e85d79fa4f0cca9313cb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187824 Malicious code in lithosphere-markdown-pdf-winston-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc6fbfe227af2797cf89ea184596ed69bc80870c57f08a1e421accae594ddd57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189873 Malicious code in terser-webpack-plugin-delphinus-membrane-cryovolcano (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83f1fbd056f464401107ffa949a75c56dc9110b1b201fa564b844e813212402a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187607 Malicious code in jest-astro-despina-aurora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 569fa8ef9fdbddd1906550949c47b3b5176f9b5c58439068442b4ef54ed34221 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186627 Malicious code in dotenv-safe-vortex-meissa-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90fb944cc269795d653356deba7764bb80e34801218d14654f3434c39296c5c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185916 Malicious code in browserify-nodemon-proxima-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f8fe0178708beab3a0e8eecf0b864a676279dca80cabc51fa9d0f1f2d2579c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189298 Malicious code in runtime-short-fork-yaml-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31da8d79938c0877172eace97de977d62cd6cef0bdb976f8e1c9a90372aa944f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189096 Malicious code in readable-holography-buffer-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d383994bcfc1920bdeb6c04e589f3d6540567ed0a712462a7b20166940e06e7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186496 Malicious code in debug-container-zeta-load-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c066f1f70682712ef0317f6958763b00dc3f36c2f09ae739d4f22feb94c69d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186409 Malicious code in csrf-eslint-config-futurology-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5a957fe964ae606d4205b7b03e65f9eb9ed8a9f2e081d535bd4c9c5b04b283a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189516 Malicious code in sirius-lynx-antares-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe1b1189742e5aae02454df7ad46c469deecbe1d18ea01b1feb3d6b00b7c548d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188388 Malicious code in octans-cybernetics-carpo-norma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21ccceeb81b50f8697417fb024032614df089a3bf9fcca910299ef4ed8c3a23b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187316 Malicious code in helios-epigenetics-asteroid-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6377e2b79f3c071d80e2ff88f6a1bc2642ed48e5cb294511d71816003bdd01b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189154 Malicious code in relay-dotenv-chai-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 135aac248520c4091ba591b4d2d36a84f16d5f524805d7e46429c91cd4936504 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186104 Malicious code in chalk-steganography-europa-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa873d12cc9e98d60b4d9b9e019ed48bc303d6e15fd979722da154321653dd78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189678 Malicious code in stratosphere-outercore-carpo-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6635b5e7c8567581fff96e0e73d61700da8a301f0a1622d9a3c1e79849f99c4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187913 Malicious code in magnetosphere-exec-hyperion-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22e09d5f8422b8db99a38067cb5bd6a9d0989b5b3b6767a6f669e76f2de03e15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186898 Malicious code in exobiology-adonis-paleoceanography-biotechnology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93e3f19daa5dce244d8394ce62ac03072f8141e96de5ab2a4497871780331b75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185552 Malicious code in areology-atlas-dotenv-safe-greatfilter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30a274a73b2bf94ea441167c4bdbdd6e5887ef52aa83f8c6509c5c8349835aa6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...