Malicious code in markdown-relay-optimize-css-assets-webpack-plugin-neutrino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 814d9c5cb9e62fb3014607e0cc8e6b132834d0f216d57d6a055d9aba26c110d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175528

Malicious code in xanadu-dotenv-safe-markdownlint-materialize npm...

Malicious code in radioastronomy-eventhoriz-thuban-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a8f4cdc8f92641c1db1067e927b73c3770a0b285eef9d5f6f7241bfe47832fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colors-eventhoriz-react-bootstrap-zooarchaeology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa0400d978fa965e52d12202d981d0a00f84aed877346a6ddbd17443b12575da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in string-route-theta-virtualize-deserialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f524d85f0a7b09046d1a72ea16b5cc85abad3d62c1dd280310cc3d9a4917907 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chakra-ui-test-quark-astrophysics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f7da34d62a5c8298da9cb0398d30b6ec22a9f5f88682ffbbef975d1fdeff375 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180340

Malicious code in arcturus-phenomic-glaciology-promise npm...

Malicious code in bioinformatics-proxima-uglify-js-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b2714f42d0f923659472aa13696e78a1b29164f409010a8320d0433129c6c99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in redis-parsec-fomalhaut-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f6b63091fe63c9c115a258761d34a460d26b24a7a9618ffb80e210f5fa78f46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bellatrix-pulsar-bionics-cryovolcano (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3eabb8807018651b30cbf8b11bdc242a257d7ecaca2b4e19db523d7cd859aa20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178761

Malicious code in gatsby-enif-tachyon-prosthetics npm...

EUVD-2025-179294

Malicious code in dione-transport-astrobiology-leda npm...

EUVD-2025-178424

Malicious code in indus-farout-carpo-astrobiology npm...

Malicious code in aquarius-slidev-equinox-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa0b4b93c5880a11a602e472cc9f2c1f1a2fb41779b5d28d02295ae6d2c12554 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179417

Malicious code in daemon-function-throw-file-dog npm...

EUVD-2025-176743

Malicious code in registry-ursa-prettier-plugin-markdown-framework npm...

EUVD-2025-179910

Malicious code in cache-xml-stub-fire-nu npm...

EUVD-2025-175825

Malicious code in umbriel-spica-rate-limiter-auriga npm...

Malicious code in octans-eigenstate-antares-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5827759135609199eeff04fcc96db52baf1dacea83e3ff1eed3eec07d88af2f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in superflare-on-nestjs-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4bc374df6bcd185907d9484f3b7435d95ad6326a7b1eba24209d2443c9e3479 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...