Malicious code in less-mineralogy-airbnb-tardigrade (npm)

Source: amazon-inspector e1e150649f9701fa8a91531cb8cfe5a7a8a65c99dfd46ea28f5561aad1fc5b44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in less-eigenstate-eris-mineralogy (npm)

Source: amazon-inspector 77108ac43c4067f2b2b30395cd971409d60596526481a9d008575809b6265deb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in lacerta-mineralogy-tailwindcss-gemini (npm)

The package lacerta-mineralogy-tailwindcss-gemini was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in hugo-neptune-config-mineralogy (npm)

The package hugo-neptune-config-mineralogy was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in exec-mineralogy-command-nightwatch (npm)

The package exec-mineralogy-command-nightwatch was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in draco-parallax-mineralogy-quantum (npm)

The package draco-parallax-mineralogy-quantum was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in development-mineralogy-vortex-scripts (npm)

Source: amazon-inspector 2a343064ea699049ea90be523317519eb296be20c57d7a4c231a935972f238d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in csv-mineralogy-pm2-transform (npm)

The package csv-mineralogy-pm2-transform was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in chalk-resonance-triton-mineralogy (npm)

Source: amazon-inspector 1bf63178531eb1e18ec7be76ee8d7757e6690fecc2d546232fa954284ad7bee6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in axios-mineralogy-pyxis-janus (npm)

Source: amazon-inspector 363a084cb89546d1716a8e50fc4400ad1e5f3cd26c06fea728164d97c956c8b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in auriga-mineralogy-cors-loopback (npm)

The package auriga-mineralogy-cors-loopback was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in astrometry-postcss-loader-mineralogy-uninstall (npm)

Source: amazon-inspector ca444498c36427713db81e6375390896a4f50a84c54ef6a52a73cad76ca35971 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

MAL-2025-190191 Malicious code in vuepress-mineralogy-aldebaran-taphonomy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a174c9530c0b8fe98c44cdccf1bfa383d150ed11c2a1dec533c5293ae03557d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175438

Malicious code in yonder-mineralogy-ablation-achernar npm...

EUVD-2025-177776

Malicious code in mongodb-augmentedreality-mineralogy-postcss npm...

EUVD-2025-177961

Malicious code in mantle-private-mineralogy-morgan npm...

EUVD-2025-177837

Malicious code in mineralogy-less-loader-dagda-global npm...

EUVD-2025-180168

Malicious code in axios-mineralogy-pyxis-janus npm...

EUVD-2025-180036

Malicious code in blazar-draco-mesosphere-mineralogy npm...

Malicious code in taphonomy-phoebe-mineralogy-cladistics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6d0b38ae49da146c24c104347787c4c7f2cf17fc32dfd0d2761d705c9870097 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...