MAL-2025-190427 Malicious code in yaml-kappa-integer-uglify-serialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5709120aae91d82f17f9873aabc817934d9aa7a9f1c29aab1be869e515d63feb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187297 Malicious code in hawkingradiation-sadr-buffer-heliophysics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ec95e06ba79116ed9f9022318dd3815356d95965f0bde25b95e036c562bbf1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189365 Malicious code in saturnology-titan-solis-astrometry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ac9c08c9f27bb03650f8aacbbcfb13a60b7694d383429b9b3af11edff258327 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186074 Malicious code in ceres-redis-umbra-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c562522cf6b72f448c78de70d7ff9552bde4eb19fa9ebfb50cab599b1bf80c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in puppeteer-rocket-bioinformatics-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b951132b96da10142462ea444c50d30aef2965745f67f0b123c553520f7c232 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186041 Malicious code in celeste-archaeoastronomy-despina-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8c86b174fa7f441665264408c849b5a246c6da4cd40a9e62d57bbf70b68a32a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185448 Malicious code in analyze-abstract-hash-code-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94747fbea6244359c0e5f32c8af9461dfd765fc51d10bca1d94dd3e3f0cef6b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189691 Malicious code in string-beta-benchmark-scale-file (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3882c058c785bd049ed13423d9d06d22f92666c8d8425b6b99e0150daa0b099f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186759 Malicious code in entanglement-jasmine-seismology-nucleosynthesis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6c9ccd83a96385818a27d8b5a66cfe8783c5d31de6b3b174068672cb1c3b5cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188820 Malicious code in primatology-paleoecology-archaeoastronomy-chariklo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 160b83698081432c0fba5307de34e54743327d72800338eef264f6d008348853 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cli-holography-bunyan-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b99709cf279a1a0f87117719e8b2cd54765f1b9ed84a6db8465fdf46399aa064 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relay-neutrino-procyon-stratigraphy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18b46d1421bf767e864fb70e46a380881c11baaf943274c94aeff70da06d51a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bellatrix-mira-europa-commitlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cab7ef498b6c313eb54c4a5697005ba951837a2e208cffa2b5687efad2360c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gulp-yildun-lacerta-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76a274bdb3d2616b5e76f058c31ebcdd115b7a1c639d4bd9c4736f68f31c0c47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185818 Malicious code in bioinformatics-achernar-spawn-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98f955a420fe0667f40a5a0ad8180233b1bdef0114f10407ba299b709b2818db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186422 Malicious code in css-minimizer-webpack-plugin-hugo-gemini-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1059a1806dfaab5b5cdffa3384aac345169ab11a207e01e109d568b24c0cb582 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callback-uranology-fork-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d89126218c63ad6d2218e842a4434823971958bc5a20ea94a407d02e72400bbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in publish-postcss-loader-achernar-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7167bde1de257f069e942b993e91cae612193ea9171edcb8a7f3df6aa4653c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189524 Malicious code in sirius-spectron-webdriver-mutation-glaciology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9e68fd5f36e91ed5d055cf305c8aaa3cbad0639e36219d2bc00df0237ff9c4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186270 Malicious code in concurrently-janus-spinner-palynology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8fcadf406f92f7582c4cf7874b4e875c3cfba00d445f70dce8eae741d340739 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...