MAL-2025-185653 Malicious code in aurora-exec-nebula-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 727d149233b8486494ce40ab83a3e2e4ecf442479f183b3b96baae8f80f59da2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-parse-variables-biogeochemistry-version-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1d3c97f89cf63e178ad70c22fd8f637758e020a930ce7a5f812b784f9baca16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189453 Malicious code in serialize-minify-decompress-mu-cron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1746b39844b7d17daa12b977f8d00dbc6391d85c4c41c6d6de6c58b2cbd8c66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189550 Malicious code in small-web-encrypt-grep-serialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a81fc5c680cfe648386bcfd84c9ba774b59c64cb8dcb286e9d2b4ea9547b42d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189075 Malicious code in rain-final-bash-bad-resolve (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b36f7861b2c5a32da3cbd2d0cb30c946b3f8a373dcf16159ed8af05069eb8dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187119 Malicious code in gatsby-await-palynology-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d70de77bf70ec7002d967b917e7a999162d78c5472219f6ee6d07e7dd73baa80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187797 Malicious code in link-theta-float-class-balance (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0217fbc8ce82958f98e07fb84597a7fb29c01d324de938f4aca90bcef15b747a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187958 Malicious code in mechatronics-augmentedreality-hapi-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77bf9f3ffa089433f5b69b03685acc2fa84ec50ba871248d9d8cd4ab5d4accab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quasar-backend-altair-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35756d40a25a4bdb4052a566e3b66b63592849244ddafa63fe0a0df31a150e39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186563 Malicious code in deserialize-double-simulate-interpret-tau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1114da922ec6e540f842f3f0bce3a0caef3f8610fdc2dec232c5995fa3a49ceb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188793 Malicious code in postgres-soap-apex-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b86a98a2d226d8686f0c0bfd665e59b9bb161862d45d5139f58b48ca662cedd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mira-pegasus-helios-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 422ee9120420e94cb81c3c676cad475d315c805d919357d1d22ec34494a7a034 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187070 Malicious code in fusion-steganography-tachyon-exobiology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16231dc3a37859ca38718acbee5374328b5cb6a2a4f63bb4577fc051dc2be239 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189252 Malicious code in robotics-callback-vulcan-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c4877fa38bb9e318c05f63abab9583e9c00f31fc4280a326bd4fa640fa7272f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190357 Malicious code in xanthus-got-telesto-accretion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bbac9defc7fbf4c08b122aec88f87e0ce104ee49d981074fef3a67e0b98cef9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186968 Malicious code in figures-middleware-proxima-jabbah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cbf4552596ae5fa6dd65d248b8c6308deae5517bbecc016d04d16fde823a4e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187882 Malicious code in luna-zephyr-hugo-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2659334214262b9e688121710ba3382e3ea0f485ee7251775693554d6ad20f91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polaris-publish-vortex-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebce85812e6fc46ef9fcc86a5c7993e6c77bffb1288c327defb1b194eb04254c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in markdown-less-loader-joviology-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b33abc594c11799681690ea35aba4b890aa18ea246a46a6bb82181059f49618 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190343 Malicious code in wolf-baryon-pino-phenomic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c5c26b4bbddebc8e36586c62ff40c2aa982515ba61ec3a07619de7e7851a02d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...