MAL-2025-185419 Malicious code in aldebaran-polaris-materialize-xenobiology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17cdab6672cb9c2ed6728b1014033a902987d96a9e4564b2ae56194180753ab8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189409 Malicious code in sedimentology-spinner-gravity-blueshift (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f50f10b70db6417836bed5412cbfe199599d79c6e933af550fce08433b3db836 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189309 Malicious code in sadr-technocracy-superagent-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05e53646d2d71b5c3190b4a7f4ce2a5856e935feab0663a1a71b74d83bff06d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188375 Malicious code in nuxtjs-quasarjet-cross-env-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector facc075dd9444f2723af86599f1c0a112a283b2d101a025f16374e4e5a91ff5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185373 Malicious code in acamar-higgs-izar-deneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb732a87c0345bf9c561af3f6c8089b30cf557c589c53180609faf4115b2a691 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186629 Malicious code in dotenv-semantic-ui-fusion-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 584061c298f10964689f1ef6b99e08687def32aa09801e3a0bd33abfa06b5ba3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189538 Malicious code in slidev-resonance-farout-baryon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa5d96a4541e7562f20a9b4fcd284e9207e6c3730ae698555ff68ddbeba4023e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188847 Malicious code in procyon-planckscale-steganography-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39c4d37fbf13255886e12089e56f22b61d91b3bdf0777757e8525a23c2d66b5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185902 Malicious code in boson-fornax-redshift-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8ad460d17d98be79c67058b757e71e3ae60d0c46be553cbdfd8319bfbfa14ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188198 Malicious code in nebula-cosmochemistry-electron-cosmicsilence (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73c704ce8181f207b2a385dd35c0b6123c6d5424d76aed8a2fa42ab9befd4488 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188771 Malicious code in polaris-wasat-grunt-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc1affc7ad0b6150f57fb3a0fdf934165deea0ff7b907870a00feb2822ac91c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190038 Malicious code in umbra-iota-graphql-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0216011a857c745443a164b8b961b2825a42498fd66c95b1ea56899885b894bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185950 Malicious code in bunyan-release-it-carpo-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10a0f1e12655c75f70e2c1d052cca1e4b0508a72ebf895e2f00f3b0db2b3a712 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186867 Malicious code in europa-betelgeuse-scorpius-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a50946ca571f73528c6dca5878308799855e749c166dfcb9eef96d0c8dc0203d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186986 Malicious code in finally-validate-spy-transpile-scale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9042f0ca03575eae11d95191fb56e4a493c9d9cc6f78b44ff5664df90a5eae0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189045 Malicious code in quick-orchestrate-resolve-cat-tau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c130e7f99154df61e98fc63369bd577376f29013630b84141f7847d9170c09f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187411 Malicious code in hyperion-hermes-version-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15cf735cb22bc6f6c69e8c0af04d9a49053ea95e2438caf22b90dd1226fbc2e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186674 Malicious code in easy-pipe-signal-proxy-uglify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cced811f8b7d7d11ae1da05db78dd95c88ffed00ef920a419f7b559ae4c66c77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189689 Malicious code in stream-yildun-bootes-neutrino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44feb90e525ec1381552034b9dc1728345a6d643d0c8790072c8a233cc41e200 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188873 Malicious code in prompts-radiometric-passport-geoarchaeology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0758b16dca5d6cced10fe96195a7c2306a87710fa84a7e5173a33d16b608468 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...