MAL-2025-189591 Malicious code in solis-semantic-release-pm2-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25f3fbcd8cfd3f79b4077a30db2336a9949bd3aed84da84464d9498779874eb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189083 Malicious code in rate-limiter-express-iota-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 220e622d69063b2b40c1d75c8eae318670c90278bb98cfed61a265a93595e3db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loop-cosmos-perturbation-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f9531a3858a703e8badb0753f120e1b0371cacf46b3ab74d2fcef9143c861a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cold-phi-cloud-cluster-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f0e9984087d6fc6265ee22bf94590da86323c7d97b5205d237579d0a5556bf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stop-apex-singularity-nightmare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f662c155025d3a5ef671dce52c0cf1783b51fa6d1c34f45dee10b1ff42c68e92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightwatch-spawn-leda-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe7a1045067738f50113be83874dd4bbe0afc4ee5fc89b8ca6d1f619c3760744 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iota-hugo-mongoose-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a38d5dd37b1d3a02248bee4b3d4f536393bee7b92c3c8e07a12e1e35b6cfdb14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in transpile-double-grep-book-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 553a60f9123c033f645a983384952a5b14109e549654cec24cd58a48befacbc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in void-grus-superagent-planckscale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20a8a9fd08defaff05f5feabf694f5b971ed1904512ea95cf7ae5be645b34d64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quasar-promise-kaus-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 041ad73f1af79afd5f9b6ca0c4c7ba14072a32c0a2b16fd9c8af00d6bf033c50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xi-moon-star-fire-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 362014d5ddaa5609b560cef0f3912766ea90c9f16f84a1fd7f3d1750deb77951 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in heka-markdownlint-rollup-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3918091bf1dccaa7a82585cf98bba21f487de7dad3e092c4d5f4c7b1b3c7e9ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in library-archaeoastronomy-winston-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbe3dcb39beccc420438542d11282f21171bd86c34f18ac5d213fcc6caa0eed6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ethology-phoenix-unuk-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 559be27cfb1ab2f6c01cd82e42610f9bb22a82253b37efdce765d9ca8e93c5ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in permission-index-zero-visualize-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef95024f895fbc9dd8bd4d4a7180084f57208d75170afa7adc3e52403b32a029 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in graviton-hapi-less-loader-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bb8fb65ea2c82a7ebd036fb556fb70c2c9cb967106c4ea3b82b1936b540d8b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187942 Malicious code in materialize-dotenv-safe-sublimation-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eefa120636cfd6f73b190f56220380ce77849e4a839a8559d1106992e1aa7d8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189759 Malicious code in supernova-apex-brane-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab01d94b29d7aa233fe2d1e9f2120f984cddca8da4556a13b4db8bb3c93f429f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190027 Malicious code in uglify-parse-socket-new-error (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 793ec543bdbe976b0f5182752f5ddc02ebaebe2cb361ec798fd818b5da6cdde9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188392 Malicious code in octans-prompts-hyperion-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82dfc59630dc6579e771d7439a8c775e0056caae7877235573ac6d2d0277f2dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...