MAL-2025-189273 Malicious code in rollup-plugin-loglevel-archaeoastronomy-on (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ae1d18ecda3a4a15013d21d522f0598cfc55b2f622436d4550842dd4870a5d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187478 Malicious code in init-parcel-run-script-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 258bb21c3a3de866aaa23cbb8d387c7def0f1812acd17a8cd69e306b229a92b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185582 Malicious code in asthenosphere-dotenv-darkmatter-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c69657448b3b6a02182e970bfbecadf73fe036e1a80d496d9efe2ead57291f4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188811 Malicious code in prettier-stylelint-got-cosmos-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 191ad1021c21de2e4d2aff52918a87b8c01692e87e5d7d02fa1dd71a2f77ed88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189842 Malicious code in tectonic-nightmare-archaeoastronomy-inflation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b79663f9084d9c421e64bde50d860585f18939f7dd9702b06425287e50b292e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190438 Malicious code in yonder-mineralogy-ablation-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0650f663599df30ee3a2fc300f5a88b7bf4a1cd8203f2410bb10acf99ced98b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186301 Malicious code in convict-ultra-paleoceanography-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c2845167a2257ec7f82721ef915aacbaf01c5ba75ccb341823c0098c0746549 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187713 Malicious code in kuiperbelt-taurus-csv-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8993b5329a7604ba0c4c94d86538798b1f58cc2d7e21fb16f89b966ebf27387 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189831 Malicious code in taurus-request-hyperion-subduction (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 805221cf5a62588c1c2a9e61e0875d0fc1e09945259c7a29162ba921752675b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190361 Malicious code in xanthus-zenobia-entanglement-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1c87e30b2ade435267565d6e87f20d6053104a597bf4718d9287de3299be865 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187398 Malicious code in hydra-hawkingradiation-markdownlint-mini-css-extract-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03b436a9cc16222004be7b8cc0ef69d75750e55eaa73be4c230dc3ee4756c09c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190356 Malicious code in xanthus-fusion-oauth-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5fa144cbc93e4dd11b40e15d7092f90e2dda9887cd891d011546ced148d600e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189415 Malicious code in sedna-nova-readable-levels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 519472d81a3bae325559686848d27604cacef6d3088adabf65c3453988faa0cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188121 Malicious code in moon-omicron-stub-long-book (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 615d1c6d7ad392f76870b9ba5fe3083a43808be1d4132f9f98bc7b60221d1ebe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190466 Malicious code in zephyr-local-hexo-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af8cbc43bd2e8f930b64bd3a7bef8e5d6d3354d3de596f4ba9862789de5ea934 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188279 Malicious code in nightmare-version-levels-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31a297fae66d552bead526aba85b7fe7db06f9336bc28adb7ec24729c055c79c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189349 Malicious code in sanitize-new-link-code-void (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ea502fe1787665ba66414467f0d22ea7bd53a05d1a42ad35bb8974b5d525531 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185639 Malicious code in atlas-ophiuchus-palynology-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9199776326ba6ad1fb449283394108e2cfe8a046a1fd232be90dc0ff164706a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188027 Malicious code in meteor-lacerta-fornax-cryonics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ba1bd24776a3f69180c132bd70b8afbbc2328c0fa93eda6da0df9e3e68ff38f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189750 Malicious code in supercluster-neptune-juno-quantum-computing (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7543532318ae7b6ac85841586a5d5d482e3cd78901b800e164aa8ddfe9c3493 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...