MAL-2025-188539 Malicious code in paleontology-tailwindcss-tethys-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff9bf7ae090235d58ac50e3f500d0ffbb3709c476bee4ff023db6e4b7af13da0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190202 Malicious code in vuetify-xanadu-stratigraphy-sedimentology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e45d74c1ef8ffd448ec4e12050350dd998b0f5a6c4214ee0a6602dc038f1e42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187080 Malicious code in gacrux-betelgeuse-package-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6169441db67c1ad514453675544949307be78e6e2a8931aecea6222e243212c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189370 Malicious code in scale-hot-tree-cache-execute (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca31f523c05889fdf9ef41a4517c7fe41532a653c9225ca1d2fc0b4f96c7b705 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186933 Malicious code in extremophile-geochemistry-dendrochronology-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bea310cfefb66f08a96c3188538369447bd04612535e404ae87469b672b6668c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186478 Malicious code in darkenergy-config-pulsar-development (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8854a12b87261a151a85d4e343a5d654007ddfc614096e8cc336e831d3deaa61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188967 Malicious code in pulsar-crust-acamar-technosignature (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca5355cbd68aac1da711412886e7e3a77b66c193fddd4cfb2ff2a0ed9e7726b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190160 Malicious code in virgo-terser-webpack-plugin-resonance-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ab26d4bc9b5b8cbf6996ce1f3dfcf3ed1761087d93cbcdbea53728f32230010 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190021 Malicious code in typeorm-xanthus-solis-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bb5168a960f3e3d393108ebcfe184344358d5a5de8bd0ebd27903e2f4fc0ccc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188602 Malicious code in pegasus-pulsar-plutology-astrochemistry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7119678a00523fb454aee015dc8349a8b07748c775b4a6d48223cfa6da03a0d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185819 Malicious code in bioinformatics-async-wezen-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d985ecd64cacf5233b2a1054b7e2ed5ced314f675ee6e190abc588762b03b287 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187221 Malicious code in greatfilter-lithosphere-isostasy-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46f7d248bef693a8fe521be2c4a3d53ecdbed962532c5d5fdff3115cdb68648d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187368 Malicious code in holography-hercules-janus-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc0747bbcd6e1cb7fbbcd0dc7b214cd578ce9437437d5ff92c3122cd217d7f36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185521 Malicious code in archaeoastronomy-lint-staged-polaris-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7ff83f7a5d6fc103e22f1e1f849ed6afdf59b479690cc50d9b75086d617db1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185862 Malicious code in blueshift-exoplanet-buffer-primatology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d143c1c5b2aab61f831840778fd5711d8bdbdd3009b39af1830df9580dbe9f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hawkingradiation-aether-mesosphere-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b33677574330eb0f97322854d638a9210badd223d764bd7216dd99dbd4dd9d14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186758 Malicious code in entanglement-greatfilter-void-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5c938a40aa714464f758cf9b7ffb6b9ac75e1e0bfdfb7fa0e1b292f499d3135 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subduction-middleware-javascript-supernova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7115b54f7e57043e98fb77619781e6bf25031e1d32deee60dd41e1798635fdb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blueshift-lynx-dotenv-safe-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dab58c5139fe550ec62331ad682959b01530abab6c25ee42eabc08fb386d1f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in route-easy-function-moon-warn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b12fc0d9fb8eece445504291184c9dc3512207749c7db6267ab9885b474b3887 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...