MAL-2025-185990 Malicious code in callisto-hyperion-norma-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0fe17e81c29306f1f25e84d0a6731bf3cf77c77932e4fcd2d1cd2459925b626 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188533 Malicious code in paleontology-luminescence-less-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e35af19331d041979605aa5f1ebb2526dca47615c002ab578283d3243b83057b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185860 Malicious code in blitz-nuxtjs-cosmicray-paleoceanography (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e4cd9862b70a1a45035e499259dbaaddd1fe11073d087794c76495eca9f7215 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190249 Malicious code in wavefunction-parallax-jovian-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 938e05e40ad6861d8df01b57009bd79edb9c666be6fa41d3d26d00852d06cb71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187975 Malicious code in meissa-polaris-pulsar-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55be14a3895b75568b753b0dbb7e610f2c1ea7657cf1dbb55f0d70db002b25a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189362 Malicious code in saturnology-equinox-cordelia-wavefunction (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2012d2ac417eb462ce8703bb345d9b81a93b9f662efa8b31c9ee85cd611fed7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188392 Malicious code in octans-prompts-hyperion-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82dfc59630dc6579e771d7439a8c775e0056caae7877235573ac6d2d0277f2dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189063 Malicious code in radioastronomy-eventhoriz-thuban-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a8f4cdc8f92641c1db1067e927b73c3770a0b285eef9d5f6f7241bfe47832fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190051 Malicious code in umbriel-transform-corvus-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba0535ab8475a2cfe19c1ada68feab5732883367dc7554d2a673d0616d955ddf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186081 Malicious code in chai-mesosphere-astro-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71f500d392e79b09d20edac037fb631418c2a0f9db9f0dc9a1e9e0a350f6138b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189226 Malicious code in reveal-md-neptune-run-script-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00fcd1101de073cac991c10c78813d879b79b93bdcc3ec039b3cdbaa3c9e2300 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188175 Malicious code in native-callback-prettier-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc0dc311373b2931d044adb4e40d0af9e1e9bf640554855144ae6aba8b393488 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186406 Malicious code in csrf-bootes-html-webpack-plugin-ichnology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42e683c14d1e59c58cadcd514400f46ff49670101cb068cc2ecf1d95b413dcf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185528 Malicious code in archaeogenetics-tardigrade-filament-boson (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9224028552e3b7dfa507b6d9c04414e4fc7c9633163fa4ca6c51bf465fb5ef0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186631 Malicious code in double-decode-encrypt-cache-bundle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2dd120085360bd941b6b618bfba167ef9076e6663bd3af7dc247e1b7a6588f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187327 Malicious code in helmet-release-it-enceladus-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac31376fc97d374897aa40e11086913141414c12cb08ebf5b53dd7f29a6780fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187043 Malicious code in framework-baryon-install-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdbb94425720ebca1c18ce11aff5f460206bbdfd2717e2116a16769b295bf508 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188466 Malicious code in orbit-library-blueshift-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ebdf3d655aead94a3e9f83afb5c3ff14cb54c3f368930deb2544037a51e40c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187750 Malicious code in less-cluster-soap-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47863fe4b497adc647bce8fd2ec2979fb05147e8a1705890e418fd3b97b51b6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185996 Malicious code in capella-biotechnology-meteor-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7007c2c8f13c28e4f7207166e71ebaf1dd15e71fd1b55b1f8686c74a636216bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...