MAL-2025-187492 Malicious code in inquirer-technosignature-slidev-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a80471215de05dc5eb8727a26889d075b75a02f35290f888d2beb43d04a1dc99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186080 Malicious code in chai-juno-eleventy-hydrogeology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a651f6b98ef3ec7de1e3366e3618090aba6d851129a759dc82198724df69145d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187527 Malicious code in ionosphere-tachyon-arcturus-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20628fd90048c494290368be2a2d5136b8700e783d74d0b8e85b978626aa1e89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189525 Malicious code in sirius-stop-umbra-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e55a14a033b2c4791dbf3754b9d92b6fe7fba60595a0c5234a281f5b9d0c6b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186936 Malicious code in farout-colors-hologram-mini-css-extract-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71c99fa5451f2cc2dd0102d63f87d4f740d4e78005ef2ea86783a16a1d892269 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188769 Malicious code in polaris-stop-sails-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fac81b336251a0f2225253fc52c78a5c8a042c98b17ae78f075da6345bd3740 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186955 Malicious code in fermiparadox-mini-css-extract-plugin-andromeda-mongodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acec897341872c6625b66acfcbdd4fa40c13d1f36c0542622e28f823bffeaa48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186437 Malicious code in cybernetics-duplex-oscillation-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9d5b9d148c937598d8f3ef6c189007a02e9549d690b0c4c30e23d467c599073 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186337 Malicious code in cosmicray-nova-regulus-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 629a39b0a9e899a2c00667e031e0aa1a1416eb7626b9123e8f696be447ca89b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186342 Malicious code in cosmicweb-leda-sadr-reveal-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 270c6cc6b73cca0763aa3fd40890eb81c4f654188eaf7bb4cd3ceb9ded2f43e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188394 Malicious code in octans-yakutsk-dotenv-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d751656f2ac7efe86e47c25583f93d9ae1536daffdceaf849d3483681ba1dcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189808 Malicious code in taphonomy-quantum-juno-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af1c55fcf778bc9a94c197a9e35bd380a006dccfdef8a994237a6c866a0b39a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185526 Malicious code in archaeogenetics-semantic-ui-weywot-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd2d85b60fccb5653a1ef6424b8a8559da59eac331213af2d61e5276efefbec3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186578 Malicious code in development-outercore-neptune-singularitarianism (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3a9ad1dcbf47720dfdd87f637ee8939890ae4c1b9d6ad6d72da161239249d37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190216 Malicious code in warn-sigma-cat-interpret-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83828718c251c07d67282f2fbd4eb70e1a5f11a3c108aebc3884dd274c09f372 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186485 Malicious code in darkmatter-build-kuiperbelt-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93483a80d5db917b2f3fe12b078b1cee95149534d194f3f15649c715de1c34e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187840 Malicious code in local-lyra-cli-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3d2ccdb241affe9f7c727dc834b0d859c9f62002f7ded63cd52e753247ab990 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189033 Malicious code in quasar-promise-kaus-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 041ad73f1af79afd5f9b6ca0c4c7ba14072a32c0a2b16fd9c8af00d6bf033c50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186931 Malicious code in express-terraforming-nucleosynthesis-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d58c13e8ab6630647d9a08c3b65040effac140f3a388762a6acd5eee532a1a66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185786 Malicious code in betelgeuse-antd-magellan-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bba981ed499b399f9a3ec1b2f5c6d1ffc81ce85026281fc7b86016b3732bd086 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...