MAL-2025-187526 Malicious code in io-radiant-kinetic-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c3062fe4212f195fbdb0430f3df687e288bc65fe6c974ea700963c2c381fdce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188792 Malicious code in postgres-proteomics-markdown-abiogenesis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6860516dce9a9d7e0ede3eb6cdc0557443c2c6fd995d1d86b1226558ffedea50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187655 Malicious code in kappa-debug-lambda-daemon-upsilon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 340e7954b401130e0bef74fc509ab4a6fa4925e7038a4129c5923e84ef694790 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185582 Malicious code in asthenosphere-dotenv-darkmatter-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c69657448b3b6a02182e970bfbecadf73fe036e1a80d496d9efe2ead57291f4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190040 Malicious code in umbra-mensa-bunyan-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7cd34942a4dfac6c4497a53e8b881b509a19d9a829afbb5b395e04cb5424ac8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190463 Malicious code in zephyr-ganymede-fomalhaut-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 400d2c278a0302d618f65ae002e9c82387d30f08742bf4fd5af0b01c9082a40f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189897 Malicious code in testcafe-markdownlint-antares-jsonp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb416541db246687e8679b0e1dbca3a372426705710771e12da27b8eab1200a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190196 Malicious code in vuepress-winston-deneb-vulcan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85b680b994c88a74132e41b6149654104412796e59caf936a14b48d70c5e97e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188642 Malicious code in perturbation-nextjs-singularity-gravitationalwave (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b165730c41881b44c233e780d2b9bde16b2fa49b0f012d8c28a06092c15347d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188616 Malicious code in perseus-ablation-elara-cryptography (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc46309237019f72cd49c94414276dcd3a6baa3c26c9218166b198c5ec16b9e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187909 Malicious code in magnetar-geochemistry-remark-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4df78ab37688f2bb7ad5ae145aa4a41be2f60db4bc5c2dc265ba44ce7565923b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186665 Malicious code in earth-protected-gamma-test-star (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 607017a42bce9e56670763a33b409d170584375240403b448fd7b4741454f5f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189146 Malicious code in reject-await-hash-try-try (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 623d2820b9969642342638ffdc496c9ef3853f209f297e48f6c68e39d9ce22e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185738 Malicious code in bad-route-boolean-compress-float (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04e16944033f69a50b3ed444de85b5c36b1c0905ef2508cece19342f450cc4d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185638 Malicious code in atlas-nanotechnology-polaris-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee962c55a593e125945858bddad9512cef3f2fc632fdde81c10a6e934f126d9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186235 Malicious code in command-pulsar-atlas-on (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72b38ad021b2edab7a1022fa57221eefd500f88a7e7cf7d45dffc7b50ed47d2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187626 Malicious code in json-miranda-karma-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e21153db14daaf54497f5b3ea3e6b717421a572780efa5d938efdcb121cd30f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187817 Malicious code in lint-staged-superagent-eridanus-bionics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 066dc6b85c08093514728ad74577e54a20edffbcf7d838638c2e8ccbdc1dfd28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187961 Malicious code in mechatronics-deneb-bunyan-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d599caec2bfcecde9b1d411603b07dd551398020115dfb5d3378fb712c2a9951 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187057 Malicious code in function-finally-beta-fast-deploy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 277c2567a05d73248efd5212ab88022580b3ef9176c3513534c105c50a8feb43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...