MAL-2025-187125 Malicious code in gatsby-upgrade-aldebaran-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73c001ab99214b4662862b263eac30593a78748adb121c5de870d37a660239fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187106 Malicious code in ganymede-nestjs-izar-release-it (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a230d94bc32273176374265684eb0eccddbdcba4bbc1819c7f8b868ec0f5e35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189941 Malicious code in titan-luna-luna-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98d1efe8a02e5a0cf5767bf942f74baa1ba82ff3d393560c1d4740ba7a5bc1b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189955 Malicious code in tool-dotenv-parse-variables-gravitationalwave-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d59d0461180ffc4af84262e680f656ee20570181f2683a7d035fc9e9f86b8628 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in winston-leda-mesosphere-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c55ac0c1e1677bbe795f58c9d6316ea72e59e3380904b89eeabd1a4e3609525 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jabbah-areology-archaeometry-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1450f46fd9e16986c07c3d8779c3e55418dc857de0953803ae76fac04be89af6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185648 Malicious code in auriga-eslint-halley-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbb0bd6588a9174fc25cd49a2b2bb3fb8a2d06d58e3da4b7775a007a7ce02483 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in epigenetics-kinetic-prompts-taphonomy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c64afb51cb674d9db30da191e7520afbe5e2a9027ba0932f5a698f2fe7425425 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189525 Malicious code in sirius-stop-umbra-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e55a14a033b2c4791dbf3754b9d92b6fe7fba60595a0c5234a281f5b9d0c6b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186161 Malicious code in class-secure-function-transpile-authorize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e28b11cbe99b65195c5c3d27c542888f775612a52a9dec629226c3caaf70c27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190249 Malicious code in wavefunction-parallax-jovian-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 938e05e40ad6861d8df01b57009bd79edb9c666be6fa41d3d26d00852d06cb71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189044 Malicious code in quick-info-star-new-import (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff8d2af4a7471f80995ba4591bc1d021217434d34977fb94879b5ed115d965a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186025 Malicious code in castor-singularitarianism-parcel-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98bf1e4126ff3c9967e5cd4f8cd33d70f42c1d9b50c4e96609a7a751f8a28007 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190365 Malicious code in xenobiology-hermes-selenology-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 520f8b0d6c97bb10f487a3d93d392a620438141a0256a422bdefb4ae61f5b959 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189181 Malicious code in report-good-error-user-parse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e72c93e97ff1357de0fc34488e9d23d0a8ad52b71977cde7e0ac0a8ea5dc92de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187662 Malicious code in kardashevscale-apex-neptunology-astrometry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ed6681820d0d0e956aabd73d96954dce8d8314d4484f8f31fccd3f6b85bf0f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188024 Malicious code in meteor-geochronology-element-ui-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b2fbd4a4d8c5dac51c3818c36571c2e2edb4ecd33469ce0e9a4d8cca5ce837d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188003 Malicious code in metabolomics-octans-soap-membrane (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1129f0e41c2b3a17aa60e8ab3ae6076953be4f3882077300095a37d4d48c2647 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188392 Malicious code in octans-prompts-hyperion-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82dfc59630dc6579e771d7439a8c775e0056caae7877235573ac6d2d0277f2dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in simple-await-try-book-epsilon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e39b3a10e41800c4664d93a4fac3389994bd787c8ea852f61631ec227e3b8cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...