MAL-2025-186074 Malicious code in ceres-redis-umbra-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c562522cf6b72f448c78de70d7ff9552bde4eb19fa9ebfb50cab599b1bf80c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188291 Malicious code in nightwatch-ophiuchus-request-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 894e22879845ad696f15e64f90cbac43dcd710f450574a8380386811c09f27d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186759 Malicious code in entanglement-jasmine-seismology-nucleosynthesis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6c9ccd83a96385818a27d8b5a66cfe8783c5d31de6b3b174068672cb1c3b5cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189691 Malicious code in string-beta-benchmark-scale-file (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3882c058c785bd049ed13423d9d06d22f92666c8d8425b6b99e0150daa0b099f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188442 Malicious code in ophiuchus-polaris-mineralogy-proteomics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6990907cf478a6777456e1509b1e4616038bb303ecad91eb09e0643fa34aef14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185658 Malicious code in australis-geomorphology-adonis-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bc6492d44c87fdb81d4918be79a52ba4d8ee13d391912cb34aaa21f5470ae4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chi-short-export-assert-execute (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b9a5aa5e0c64e003069b43ff89f71a2a040569317baf9e7ba44dbaaa4ce5f97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exoplanetology-superflare-webdriver-manager-ablation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 800b42a3bfdd28d0c3ac9ded87a82fc2ba32435358b33137c1041c7234b418bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hexo-steganography-cli-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39fd3e3304d9d3de6b3124bf1144ed9f9888aa9568a564da109abac7d783a34e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188160 Malicious code in mysql-fork-pavo-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 238d311463f574170c5184cf88b55be3f9775159d52d35ba3b1353ef03901c60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188894 Malicious code in protoplanetarydisk-thermochronology-zenobia-multiverse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a758e62d1f343445dc19b0a564a18702d6a739a33dbcd10ffa4647fb31d66c37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188951 Malicious code in publish-magellan-magnetosphere-paleomagnetism (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fee2dc3ceeab278bb8c4c5fa3312ad51340599245bcdf8b5de8eeb28e8d9bce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185928 Malicious code in build-geoarchaeology-mutation-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15ee4d207302be939457bba8282eadfa6cedbbfd6ef02bc6f279847b956f4f04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189767 Malicious code in supernova-miranda-ophiuchus-resonance (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eee783b24405094b625f3cc656fb7452e71114de055fbebd3c90db0063e74b2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188542 Malicious code in palynology-semantic-release-pulsar-wormhole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34206c99211389792c4d934032f76e4292094dac40215fc8bc1353575dcefef7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185394 Malicious code in aether-pulsar-polaris-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91d89cbaa30e7fe600859577ad2f26ec0d66a81fd877ec655c5d214083593fbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190440 Malicious code in yonder-sass-loader-firebase-cosmicsilence (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46cb086ef793321eac1bb5c979009fed3c19bdd4e27384cada7ff0f8aed49e83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186807 Malicious code in eridanus-geochronology-element-ui-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c70e6b62e3a9f2699ecf4f192f3066aa1df8d5e90541a43a39c446e93e35fdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alphard-gatsby-commitizen-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa5b5cad41900c2a1a91c718854a886f4827fa919f848f476fe11be4a3347afe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in changelog-unuk-antares-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d90a92b9a0850e106d3410f591ad1745399775c72d60a56b79bdbe04082dc27c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...