MAL-2025-187377 Malicious code in html-webpack-plugin-taphonomy-test-coronalmassejection (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a99d7d629d5fe69287d00c673ebe7807540a4f91baae901f955841b2b66336c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188733 Malicious code in planetology-biogeochemistry-areology-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3ea2cdad2ea28eee97d50e39769c35265556f86264f39d84627c958c5f00616 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186572 Malicious code in development-antares-xerxes-membrane (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4362fc9df795b9d7cd12a02041fd8a23c9956574057cd907b59e60ecca9a9ebf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187919 Malicious code in mantle-galaxy-vuetify-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27d095cf3f4227e38f0e854fa3861543aa352678e355ebee87d347cda3e374fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189884 Malicious code in test-meissa-stream-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e201ad4797f6c1d0adc706095b06d260333b5a1677e61717564549f492ee379a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189630 Malicious code in spinner-uranology-terser-astrophysics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da7f5234df5681f13b658fb2fabff25e4b06dd41215f41a2a1bdc11964a46de9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189129 Malicious code in registry-quark-barnard-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8be35985da5091690aa56f84416af345aa641a6b98c78446a0a03f371a4176d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186997 Malicious code in flare-polaris-sadr-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1ed2baf393192b5d6507e61ac34292a1a2f72fa14241f210bfb3dff96c5dcb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190095 Malicious code in upsilon-sandbox-static-module-validate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78e533630891122508e162c5d422726d9d4e5f8d60c5a3411fbb538bc10a3d28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenos-cladistics-dotenv-safe-joviology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae340cacc9fef88152d2d2f0ee248db87d240ed77d1746d6db2b10276738e0d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kots-aufb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1977e69d97b88c5beb3f89fc181ce83abba5f00344ac4d2db755ccdfa049bb61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kots-uajb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c09c80833ac37176a712b969d634df72916b7008859443b2a1025cae88c31d81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnu-nofity-gamni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4da47658ac3bc2b4a35a9900e6d9826f9aabdf15232e39892e2263ee9b0c25dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kulig-tgacedcadopav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16d728a93c50c2d84388357ece1548f950285905a9dde2c0911c49e1e06fb4d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in liobc-ug-aag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8d1eff92455378f34d0e5e4541bc3992cba06772b6bcc31bf716ea2d60eea57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodja-gifaisugkda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e503e18d6cc0d9eb3fdef9ff461cad20fedcb0ba5e7b8471be3a214407e1eb58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-ali-ava0nuu0ku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbba432e2d02bb240a2d15b9075a64b30dce2311d569dfec391070baa1715a1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182456 Malicious code in imodiov-kufni-coca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61a56ccbdf8fa4517c3e9db59bbc788c1f919ddf098c5063fad6e34d5ae9462f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182545 Malicious code in imuay-agig-iucaufg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db4dc75126b92ebe904fc3ed5d44459ea678d0448671578e9b5f54089a4693cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182477 Malicious code in imodiov-kugfi-comai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac79508ca47a94d55c4cc7547eef66fb8725376a30a481ed213b470698e7db8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...