MAL-2025-188112 Malicious code in mongoose-css-minimizer-webpack-plugin-spectroscopy-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a2a729962259a1b810fd5b3d3ebbcd7a38aca27aa52129940b9e07adc0b6483 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189438 Malicious code in semantic-release-aether-buffer-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ef5dd537b321d8fe283fd48cc1202163ccbfdacb0405c484311db90efcf6451 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proxy-cache-beta-iota-water (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62ea476eadee6f737a5d5939604779845fb47a080e38fec660f39ad6b1e818e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fetch-readable-spectron-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c63589f0ebd1c39360f807094399bb7293af123a3f30940dd806d287be6c8076 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186159 Malicious code in class-eta-lambda-hash-root (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f715951a402718855a35a9591b873d900eda66c234eb1fc503ce3e337610fc3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187334 Malicious code in hercules-css-minimizer-webpack-plugin-cz-conventional-changelog-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d95fd0ce23afe24eb49a8592e43e5bfafbff1956c11ddcde2f1b53762931d47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188797 Malicious code in prettier-luna-mysql-stratosphere (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3222eb9b99d6842ecb63911c1a6c1b490c2c17c005acfe908b74128d7328f962 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186396 Malicious code in cryonics-meteor-spawn-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99c27aa5329f56cf3e14b276cb98484dc547ec4b931ebec69624e17a939e8e1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185532 Malicious code in archaeometry-airbnb-mira-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58048d67db0cef8fce7a3b4037d8696098f4aa0f7bfa02aae2be59d7ab5b6049 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antares-superflare-transform-blackhole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfc769b1580800f4ebc00cd8783e50ddaadf96f84d38a38a02162fc2ce41da4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in global-cassini-hexo-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5e8261faea100870ddc8b1d2bc37fc01e95b83d8331ba91092d10e31091009d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ursa-jest-antd-helmet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d33c8be0ca0bb199e1726c8dc39437ee5c00d4402fc8e2a2ea5ffe0b0846ad2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in graphql-npm-soap-fermiparadox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56716e434cd1c5a44faa2761e4607685f3dc1bfd3de906c84be90f3ba243a05b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuxtjs-fomalhaut-postcss-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b3531082acc33005105cb670ecb9ad95d910561eb968cd85dccd4a71b29b32d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190428 Malicious code in yaml-notify-authorize-code-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a748c3c4c6a4f455fa26d8f4b30766e633d2091829606b8fe5c328df246bca5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fusion-nextjs-iota-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2739ca69baf49a58e1a18599d116efe40fb26d5faa0c30a424d82a862f56e333 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in development-mineralogy-vortex-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a343064ea699049ea90be523317519eb296be20c57d7a4c231a935972f238d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perturbation-technosignature-pino-cosmicsilence (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0632933a35c46b3f196316eadeb2fdae0ced3d31736337c38ce07b478f2385b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in socketio-spawn-pyxis-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e9d1cf25a81466709ef959f4e99e76747753682450c3efeb51214af159a4a9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uglify-js-gravity-upgrade-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7a40d3f6e3318ba9e54e62de53776b9b481eb965be138be7632328a3c7ffa76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...