MAL-2025-186344 Malicious code in cosmicweb-sedimentology-ignite-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 244a8086b97b3e59695f91b83a0a171f8762ba34756d6ee338d98344eb1b1b05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189213 Malicious code in rest-nova-nightwatch-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 667df92958e84b0615d81c3cbb178f8c117b019ca8357f70aa7c4c9d742be2b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186593 Malicious code in docusaurus-eventhoriz-heliophysics-neutronstar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 529590441c35356fbb00f827fbbb5750afbf46a7346290113ddbac9f4cbe42ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185570 Malicious code in array-simple-water-tau-book (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30cc8225a97aed8f4d662ddf94085f9e9c314a50062c44fc92cd45f49a066f37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187125 Malicious code in gatsby-upgrade-aldebaran-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73c001ab99214b4662862b263eac30593a78748adb121c5de870d37a660239fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189225 Malicious code in reveal-md-electron-builder-chalk-steganography (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dad219c6c13a2f6799e4676b3d3104655eb69ed912f81bfa7f92b9610298c61b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190211 Malicious code in warn-bash-grep-array-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8bc328598631e616c53ed70b1dfd4a169e5b60020465e7e29511eb35b9d538a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185526 Malicious code in archaeogenetics-semantic-ui-weywot-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd2d85b60fccb5653a1ef6424b8a8559da59eac331213af2d61e5276efefbec3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188623 Malicious code in perseus-css-minimizer-webpack-plugin-janus-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1c5718608669665e65c60caa8f7ae2f05eb9038c1b2a0540f96b584f1ea4dbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188942 Malicious code in public-process-wind-debug-view (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ea636a7e3c1a51019c949018a9314e3ce0b0c56b8da96ba2cb60538a3f50127 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186876 Malicious code in event-husky-tachyon-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47d6d40bbd46796ffe0433b9e3e0fd88b76fb46ceb7a4973ff526bea29bf1b9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190233 Malicious code in wasat-foundation-webdriverio-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efd9a86d6be17cbc44f9dae6883bbba2e3a38738aaf80a503bc35aa86bebe5a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189690 Malicious code in string-avior-heliophysics-tachyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f7ef6f68451c5fa51ac41295643a67cb2a6c0437ba9c76305c143de6da7c1d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186120 Malicious code in char-bundle-route-refactor-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a22631db367f870abe285498e1329436f0e2cdae19a36aab92989abb9d68daa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185502 Malicious code in apollo-ganymede-algol-impulse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6884123d01cc47416990accc41d7ee9a8c0181cfe461bf7c83149d09d680ff4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188859 Malicious code in promise-impulse-levels-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9759c470ef837c2329d4464aaa2de5105c8c732fe16a30f4b5456be003fc6f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188772 Malicious code in polaris-winston-cryonics-palynology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e5e7d42f185ed3a6589e791dac133bceb2f0d294c95c473ef0661645b658ff8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186469 Malicious code in dagda-ganymede-fornax-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c482e6ef43cf12ba929a25f688df88502f4b2657364bb234a83ecb03729ec0ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189453 Malicious code in serialize-minify-decompress-mu-cron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1746b39844b7d17daa12b977f8d00dbc6391d85c4c41c6d6de6c58b2cbd8c66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188660 Malicious code in phenomic-superposition-publish-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93916637978c3ce08577a4c382d75e86b54b1f867c00b47f891c395bda425c33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...