MAL-2025-188569 Malicious code in parsec-kaus-optimize-css-assets-webpack-plugin-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97de95755cec1310fe309f1de9501ac87d304da7024b581ecddb59c229de0c22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188894 Malicious code in protoplanetarydisk-thermochronology-zenobia-multiverse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a758e62d1f343445dc19b0a564a18702d6a739a33dbcd10ffa4647fb31d66c37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188714 Malicious code in pipe-auth0-barnard-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93b3b68d9a0c694ca31182e0583f4bf4ee987574a2c4a765974633b4f89dc72c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188302 Malicious code in node-bundle-omega-deploy-sandbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a095ecc1cc54c8a2cf8e5c0be06972400b715b4e3b047d2e5ddef93d5239ae2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185596 Malicious code in astrochemistry-planckscale-levels-singularitarianism (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d09eaada391f12d930144df90244194a3d73586bebf0dca02fb04568762e1e1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188542 Malicious code in palynology-semantic-release-pulsar-wormhole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34206c99211389792c4d934032f76e4292094dac40215fc8bc1353575dcefef7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187373 Malicious code in html-webpack-plugin-deimos-toml-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bb045f13fdeba200e83090bae2409a07346335c9f563b24f275cd3404d87132 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187317 Malicious code in helios-fusion-rollup-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39e25b31fe31c11fea70657cac7ab2cab55d83c2a919aa7ee6feccf67d47567c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188532 Malicious code in paleontology-acamar-steganography-commitlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9d1ccb96d7ec2f9626a93f33572ff27aa51718c6e0e1f4bffd1f94f89e753c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190057 Malicious code in unix-execute-file-route-reject (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d68b960e530b4d83fb85ec9128c0b09c044d524863710059518465a2c086801c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187078 Malicious code in futurology-taurus-celeste-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1045d491631ce511cf53559c44f9ae0829ae32107f0174344aac337df169767a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186219 Malicious code in comet-orbit-umbriel-thermochronology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44ebd8148bd5f35738b7a83182930c3eee2f0343389f023bb854c42d9ee86047 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186316 Malicious code in cors-centaurus-electron-builder-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector feeccfb1d261c6ca7989d2be6cee1c0b020d5eaa19f8a9d0e008e8d47573304c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186062 Malicious code in centaurus-gammarayburst-rimraf-glaciology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d46eca5e01dbf97d7b3a851c9769c6eecd9d11efc62d4c66c8504cce9c3395ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189653 Malicious code in star-earth-small-execute-decrypt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71714330271c58d2d5c06d8a1ef7ca0ee575d60552bc9bed163a8d19d031220b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188906 Malicious code in proxima-antimatter-express-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8b4b464bd726e60d3c7eec51d106ebe982b5d2c3a00d8c321279105ddd4c030 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186238 Malicious code in commitizen-antares-magellan-saturnology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b1c1df5aa59f1547dc7c7f609cbd53203e8a2d44e63c739099244c9ac7aa5e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188789 Malicious code in postgres-on-sqlite-archaeogenetics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 742c3f14038069f04c50c352cbd97d098d6f27ab665f78f595fced9e20fb1028 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188613 Malicious code in permission-index-zero-visualize-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef95024f895fbc9dd8bd4d4a7180084f57208d75170afa7adc3e52403b32a029 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189968 Malicious code in transform-robotics-filament-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65dfde16dd768ac14d658dcc5d9aefd9d6e5e79e6df9a61fe8202c0c895d6480 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...