MAL-2025-186064 Malicious code in centaurus-neptune-css-loader-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0908ef85e2b7fe9360387bd155ca3c553dcb970ba235726eda56533fd71a985 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190217 Malicious code in warn-spy-grep-compress-load (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7adbd14c509a4b5f131c01428c8968f456dca5cbe03c08c476765d17541eb71d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190421 Malicious code in yaml-barnard-jekyll-magnetar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 647bcb1618cd7231944ee6afbd42020458061895e8490b3d485d6225634c630e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186390 Malicious code in crust-thuban-archaeogenetics-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1d77d5878eb84187eaac9705aa2e1f130b0c1a6d7d56c13ff36950c3de33028 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186416 Malicious code in css-loader-mui-wasat-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e53cad67075a8415d525e1cafbcd4ef14fbb3971d78c9c0a1085f10f86fb472d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190035 Malicious code in umbra-australis-dotenv-safe-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8bed70457fc263e8d44f6273717090c9025bbc2a70a05504db3aa29de42573e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186480 Malicious code in darkenergy-helmet-epigenetics-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec56832dc06c5ef6915717f5815c164d60cbe02250a0a5fe8f0cf1f11c75cdd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186808 Malicious code in eridanus-hermes-mui-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2664398dc9b5987135c7f0b48309f9a0fe148b2e57829465f8e0fab3c3bbc987 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189794 Malicious code in table-private-module-zero-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c75ce0251dcdeefdacf81cb4b3bc7b73a647e814e9cb35b7f9ba4a7729ba677 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187949 Malicious code in mdx-callisto-multiverse-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3374948137016d0fbfe8d61be9db1108f9bd36e373e2755a997e3a2e83819f2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189011 Malicious code in quantumfoam-rollup-xenobiology-csrf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcd897b0dd703194271f43541de917ba03e91ca247a7e6359ee7fb720af2327d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189484 Malicious code in sigma-awk-abstract-error-kappa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69d501bf3234ac1bd75171ea127e1a4bda1473613eb110a0228aa8c4a668c5df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187305 Malicious code in heka-markdownlint-rollup-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3918091bf1dccaa7a82585cf98bba21f487de7dad3e092c4d5f4c7b1b3c7e9ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187667 Malicious code in karma-install-spectron-bootes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c100b4ffe6a44ba5483bce1d575dcaba517d9fa586c24cdd4ecb5a4cd06c5816 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188493 Malicious code in package-process-helios-markdown-pdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aeb81f40d3ff44ee4699781197daf1ed03b36c2de1caae9749443281acd3d14b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186822 Malicious code in eris-writable-docusaurus-on (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 722d4d900728b73a74cce7951c7c4f7bf6d25c2474c3ebdb2614383d6b187cfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185355 Malicious code in abiogenesis-cli-tachyon-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3731d79580a9a1a452610b6a842f4635104e983316a54b1cf97ef46f6b025b4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185838 Malicious code in biotechnology-draco-webpack-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37351f9d161bded8244999f286d5a8e7b5a01f0fcdf5440fb810ebbaf8eaaf8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185375 Malicious code in acamar-prettier-stylelint-run-script-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0e822903612086e7d1e7ad54630715728a70c2ee625c2fdaa20967a642d7347 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188877 Malicious code in prosthetics-commitlint-astrobiology-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbfb4f7c503130fe491771b7258e74f8a9cad2cc0d49ebd7fa62fc8813bece12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...