MAL-2025-188658 Malicious code in phenomic-prettier-stylelint-development-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98e01e9e7bd3ca58db60522d781d1eb1d5bbd8fc4776327cf8da1a38e112b2cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186526 Malicious code in delphinus-miranda-postcss-loader-chariklo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd0bdf76910544de6f7f52a3893e80a33923959859d77b7bb710fdc4a41378e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190185 Malicious code in vortex-auth0-string-holography (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4b12f620e4fb06f261bdd80d409124bb22468e54001e0012b822d68da3e2741 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in link-cron-simulate-assert-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e256837491141edc7c92e5b82e6fc342f0f94ba27253023fe34abb8a251812cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gemini-hercules-orbit-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fe0e579d0dafada0cd5327982bc2a2ff526ee05793971d21670cb99531d451e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in materialize-prosthetics-petrology-resonance (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01dd8da38192770203f00127f8b6eceeccf90a6ade8e100f008b2c78c4a8867e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in csv-envconfig-achernar-stratigraphy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b207aef7982bc191e67106e813e982bbdddba94eb597499b07907b024031162 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in atlas-nanotechnology-polaris-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee962c55a593e125945858bddad9512cef3f2fc632fdde81c10a6e934f126d9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in primatology-paleoceanography-mineralogy-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a547564613aed99a100963bdf0b3057b8aebc1084ae8fa5995b7d4b59157fb20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fermion-geochronology-quito-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7a2f7cc81ec51b781fdd5edf0b82a3ff487dfdb67166aaac920eefd31e6d59e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zeta-beta-secure-secure-load (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d93a5c435de2671bef333672da04229cac813381b0a6af0485bceb971f387c84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cybernetics-selenology-local-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45900616fd9126bd090f5865bdf4a028806e11b2380fee63848bb099345c6c7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in extremophile-geochemistry-dendrochronology-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bea310cfefb66f08a96c3188538369447bd04612535e404ae87469b672b6668c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in async-graviton-webdriverio-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adbeaeed465424e52a3a1c461e253d7aa23522c4d71e215bf651ce7fc5cf5a79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zeta-permission-beta-short-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 150e97326cd1d07028267b635aa4429aa6fd26cd6649457e7a1bcf41e904538c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in acamar-prettier-stylelint-run-script-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0e822903612086e7d1e7ad54630715728a70c2ee625c2fdaa20967a642d7347 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saturnology-enceladus-jest-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c71ddba711570c0f93b560b77dc589e118eafa0301b4b1d647ba6cc1e251c4a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in darkenergy-style-loader-style-loader-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b63bf79b92c5f6a95a6dce7dc164aa540cba55e4dccae81f7f45965620fdf7ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in virtualreality-bootstrap-geochronology-nuxtjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be79ba73e6ad03713c9493b36f0c5582b051a8d5650e4af98e8b737179a3b14e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zenobia-terser-chromedriver-paleoclimatology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94f6befabd5e1c3a45c07315f720e6099a8015a0b8720eb8aa31782ee0070b8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...