MAL-2025-185553 Malicious code in areology-darkmatter-ablation-thermochronology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ccfc4db01117ee624ad9404c0333c608488382abb48fbb690352e94c3f4e111 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186775 Malicious code in envconfig-protoplanetarydisk-dotenv-safe-isostasy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2892eb4fc40461d42c2bec88298e5cba9f2060177b8aa42e3bcf5b4584a481e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185559 Malicious code in ariel-callisto-commitlint-config-angular-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cdfea94216d46394d4f07bde016b03bdeedf21face4db3ada1a9424b0a6e4aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187085 Malicious code in gacrux-supercluster-superposition-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fd0f296964ee5e1b57fefbbe530b24988b598dea0bc5f6477df3d3f09c666a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189717 Malicious code in sublimation-private-technosignature-futurology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b58f2f9903b4478824461b4968c1561d1e34226aa387f3206db9b75f9b05569f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188726 Malicious code in pipe-simple-virtualize-void-stack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 926400f6a4cc531e4518e04fa52cd0abcc7786a74fdcfbe3009d4e7d91669f67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187995 Malicious code in mesosphere-query-dynamo-uranology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ade0f9fd45452062aac0899a4880a860ceef294caf0210e74d81e62b34c6889c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188942 Malicious code in public-process-wind-debug-view (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ea636a7e3c1a51019c949018a9314e3ce0b0c56b8da96ba2cb60538a3f50127 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186868 Malicious code in europa-fork-andromeda-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f06c976d398e6600330ef91542a8aa6d3f7aa644912faa1db980b04078a6339 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187416 Malicious code in hyperion-prettier-stylelint-sqlite-rehype (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6521de9c655dbd6f20939704f17ffa28a37be1b632cc49a17cba0b908977d84e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188058 Malicious code in mira-fusion-yildun-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6df0ea3944c62f78d72d9a701c0e41295455162fe1dc8975371c9456810d08b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189729 Malicious code in sudo-reject-mu-proxy-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71bd21ebc82601b1500c1ec0b38beaf261822f483579359312b433a31d3a139a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187931 Malicious code in markdown-pdf-boson-magnetosphere-paleontology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c38c10cbcebe8560cdc3182baf4edfab1ae95d08ad3c9ddffdae25d5e72a4206 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190404 Malicious code in xo-halley-less-loader-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96b37dc1940687ac22f89462e574c1e94a104bb168b0c8d2da912aebf30896e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190082 Malicious code in upgrade-async-forever-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75caed0ce1fb98070ff3b33974aacb7b1939cc7108213d2042323c1aa276575d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188217 Malicious code in neptune-framework-cors-ora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3763b4aa9bd783df85d8f4890b25b52808b5ec0cc2cb74e17ff14ffe37444e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187761 Malicious code in less-pavo-restart-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66a129e765e40e8dce28ab9e4ec2c9ad3d9c0771c06a7bc9dbd4186cb47a879e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185894 Malicious code in borealis-dagda-impulse-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3587d666c8d89b9662eb73f726664bc5a3cc787c88f64a73d6771d9b674c6f36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186174 Malicious code in cloud-star-parse-fork-sandbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8952f1c640e356dec0fbec116b2f433817d877347505c728b5161b584a49ef99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187691 Malicious code in kinetic-jovian-auth-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8107a8d5b8b2d6d8ba84c7516568ddb764c93e043356499a8d404d0189f719f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...