MAL-2025-185930 Malicious code in build-neptunology-neptunology-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed64aacd308317013397e7f8a5aae9ee24e87f51b7fa69048677cd32e333872e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188078 Malicious code in miranda-markdown-pdf-rate-limiter-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e691ac26ae0b92394354fcda674316914c8f0464d09a7681898100fb4da7308 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187268 Malicious code in halley-paleoceanography-mui-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e1c18c06b50e272a459781ff344e0e72fb6cca19422c4940dd8a9f7d835cb9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189106 Malicious code in redis-astrophysics-astrophysics-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1333edb4716edb56d7bfad2d798c5bbde5a257033d88551200e6b6ea7bb504e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187602 Malicious code in jekyll-less-npm-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dbfe23271c900f951f36875d53f77f39ffe4fd6d1d97cb14618347003c907cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185402 Malicious code in air-minify-load-secure-encode (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1af3ec54197cb7da3f25eb9bd335126dffc771d242e1a8159a7354d5522b5442 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189665 Malicious code in steganography-aether-on-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a82bcf9484d0efd576c49a8f70274e7b0f9d424b9ac8f7f2c024d1aa3911a92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189512 Malicious code in sirius-astroinformatics-ursa-futurology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5945199d76fb43c98512cc0d420376ec81e5fba1228e737d3b251245f1c13f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187540 Malicious code in iota-less-loader-commitlint-config-angular-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc9a2cc8ab09085bacdd14c9dfdd31ec3738bd42d232c1c5a7b3a72c15ab2016 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188238 Malicious code in nestjs-css-loader-command-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aadc9bae2c451c458228c585830c85a5ab63f5a358e31b3de37b61fa252b4550 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188394 Malicious code in octans-yakutsk-dotenv-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d751656f2ac7efe86e47c25583f93d9ae1536daffdceaf849d3483681ba1dcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189640 Malicious code in stack-compress-nu-zeta-mock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 175e67631711d41d02520521df6190627ee39430a578d67183c97e9628a7568b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188074 Malicious code in miranda-janus-fornax-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07804782a9ba526b29707dcf95d01520ddcdbab7228282fd401eadb06ea59474 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176211

Malicious code in static-view-warn-cluster-catch npm...

MAL-2025-190246 Malicious code in wavefunction-ariel-pavo-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3912a524aeee27b07cbb82ea663ed0e11889501b10f31b17df11d60deeb0c0ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186236 Malicious code in command-react-bootstrap-neuromorphic-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 534a61a35756e1f7ff0d122533cba28a8dd16c76c34405da0657bbd6de091be2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187945 Malicious code in materialize-pegasus-typeorm-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4649dbfdc9a442b1e02107e4830d914cd52129b12965f257c943f89497050c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190467 Malicious code in zephyr-mongodb-wavefunction-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb6455e842bfed2e45795b6fa4955bfa999151b2b9d2cf8678f31179f7a042f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189882 Malicious code in test-fork-gravity-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2cd155e14b0f3d8707048a509a44689422afdacf2b452915a05a5894bcc2dbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186157 Malicious code in cladistics-virgo-transform-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 994bc4952b96b18a4e7942486a5ecd1f6f2239be14f0c987dd49fec7884cd8b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...