MAL-2025-186554 Malicious code in dependencies-dynamo-optimize-css-assets-webpack-plugin-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56b88c2d2b382ffb9df5c83d2623b4d0be3b8e53cf60c14ef812d31a57ce193e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187955 Malicious code in mdx-resonance-cryonics-geochemistry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7acea75af333e29d6693c967fecafdc79642a14bdd49af2ec3e0b2428ba053fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189467 Malicious code in server-weywot-ablation-ablation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53c9fc4f3166ccf20c5e4b32e4b3bac7c4cd9f0d460061e1b498060de7130298 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189048 Malicious code in quito-config-lightyear-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2774879e2c0a7ce0d979c45203cd24a0201a338f4a913577244ee6c095d46e02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188621 Malicious code in perseus-cordelia-google-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecebc93fbcf3aeb606dee2d52f301163a9c3530562ae4bc4d9ffc92e5b94d41e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189269 Malicious code in rollup-plugin-chai-soap-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 961e8a7cfffd287292e217d76e3379b062907280f409cf0ea9836155a60343e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185939 Malicious code in bundle-alert-runtime-private-bundle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62c8caa3aa8ccfe49e936067aefe3ab052ff9b38de21448ed8dd888dcfa7bea7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190295 Malicious code in websockets-hawkingradiation-redis-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 994bdbce332e280e57d34568b49bd87cad47f442aed60864ca334d072929e08d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189900 Malicious code in testcafe-postcss-europa-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0c0b587b82115b84377ead8bc9a56089abcc5377b44746e483ed6e69e89ec63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188639 Malicious code in perturbation-bulma-mensa-eventhoriz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d51a9c3a3b80be94feb024b2c0609f78f69db01e5b8cb7bfd485aa825e763b56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189749 Malicious code in supercluster-grus-non-blocking-lepton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e73d9f265923611595f2bf95140778a1427bfc078db498e7da9874c1aba0f7d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187246 Malicious code in grus-private-quark-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d16e13dec01cfb2b4640caf03ff44b0bc81c7783aa0631bc664936909d63ed3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189434 Malicious code in selenium-uranology-quantum-computing-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3c7d510bcd6e5b1d50c17ee7d0dcae7d1d33c72605bee82ff84c4e5d80f049c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187530 Malicious code in ionosphere-webdriverio-module-primatology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cacb870c31bd3d8e50ddeef025ab57d87c7da78f744eab59b8ed9e85e16b1d46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186647 Malicious code in duplex-lacerta-link-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bade7eb4d1912f4a4adaa57c5a552d18bf4ea7cd965d9d597d05876253f04638 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185516 Malicious code in aquarius-relay-pulsar-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67d6ae11b1b219ec043fde6f59f5ffa676d68e76745da39cdef38ec9ec99813e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190017 Malicious code in typeorm-nestjs-equinox-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2539d54672e1c07289a247cb5dfcb52d0972645828eb4fab92a6a5394efa677 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187323 Malicious code in helmet-geochronology-rigel-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d371d95824a99bc7c0274912a47abb83388ede4bef9957fd5ccc6581349b5988 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189012 Malicious code in quantumfoam-run-script-troposphere-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c28a5eba8e1702bc9040b8858caf62a7744397b6b2d831244e7b07da5d7c6e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187260 Malicious code in hadron-postgres-phylogenetics-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f7efecbc67236e9f7c84f6a8aae55425b28b28775927173eba1a0a284193afa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...