MAL-2025-186074 Malicious code in ceres-redis-umbra-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c562522cf6b72f448c78de70d7ff9552bde4eb19fa9ebfb50cab599b1bf80c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188683 Malicious code in phoenix-eleventy-io-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ba874897fdcaf548e9b7fbdb00270ec5ea6feb9cb237f6dcb0946a480910f6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dependencies-taurus-dotenv-safe-ora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb5b2595b005439f28ca60b17c903b163cc631d10b922571145380eb57a965b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in csrf-thermochronology-oscillation-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23992ff1d63ebb87f14b33af1af9f888a76886aea879d7893bbf8d971fb1fa92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190057 Malicious code in unix-execute-file-route-reject (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d68b960e530b4d83fb85ec9128c0b09c044d524863710059518465a2c086801c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187376 Malicious code in html-webpack-plugin-promise-meteor-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20b375f9370962cf7ade36a9f7b0ba37a5c08a6101753be1493de2323c71fc51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189426 Malicious code in seismology-meteor-odin-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 646f08ee4ce2efea4fd05b134c78bceafe4473b1a8230e8c29bf3c6d80d94773 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188950 Malicious code in publish-magellan-loop-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68faf84b597f7baf140863b199982368f3f7446f579a20a5a96af021380178f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190107 Malicious code in ursa-hawkingradiation-pulsar-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a44783e0629c201822fb799a347c530d77eda8b2138bb131f0087271ddeb17fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185530 Malicious code in archaeogenetics-xenos-telesto-tectonophysics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27da6b5fd36366bdf4dc7b0f00159a6daba029c6322eae8913d87161aaa6a6b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186779 Malicious code in epigenetics-graphql-tailwindcss-abiogenesis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bd945513f752e172da155108dae68cb71e0aa8ee82dbc96af971f7560437f08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185402 Malicious code in air-minify-load-secure-encode (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1af3ec54197cb7da3f25eb9bd335126dffc771d242e1a8159a7354d5522b5442 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nova-quantum-protractor-commitlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42b35d5356afc081638f9e5562655901df31ef1d90eb6c13779454805d9ab8f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avior-quasar-comet-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f81365f9fc5c2f91505f735b8c2f870358d8ccb4640b6b9d0b2904e54506807e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in passport-fornax-phenomic-helmet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0027eccb2059e4e9d4978c1294182a8c666dbf5f0394eb96327a6a25b3a20c88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hexo-duplex-xenos-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa1151ddade4025065c48113f1079d31279af60beb4be33b8708bba930be0e96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odin-holography-wavefunction-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c09fd2453e24f48107fbf3d8ce34cb5c157911aa14bea9e03e3c6f7a6097ce7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in easy-link-authorize-simple-view (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 265547bf1390cb037550762c5d301a6413a77ea318a92378edf2e5eca552e38d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polaris-wasat-grunt-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc1affc7ad0b6150f57fb3a0fdf934165deea0ff7b907870a00feb2822ac91c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in async-lynx-lithosphere-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43ec24e13dc5676cd39326afe618afe0b9e4435ea88c7c601c8b2053d26a6c81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...