MAL-2025-187122 Malicious code in gatsby-fornax-nuxtjs-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17493a8c27f8742691d5fb50ff801a6a531114bb0524fe9605d6af16d32780de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185796 Malicious code in betelgeuse-octans-aether-less (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 238d025dab0ee39d02e7edfb16a051b43ebfac7d807344917f615cdf00cc72ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188464 Malicious code in orbit-css-minimizer-webpack-plugin-paleontology-centaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab7f5cc9d01824907a5d44dc771cb5aac82e0c1a99d9446c42589fadfa59dad2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187043 Malicious code in framework-baryon-install-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdbb94425720ebca1c18ce11aff5f460206bbdfd2717e2116a16769b295bf508 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188165 Malicious code in mysql-spectron-webdriver-primatology-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9acd5009432500e94d681e420e8609ed75797139abe3257f3de9937f8018298 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187549 Malicious code in iota-zephyr-nova-octans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 474c33dcd82c42f216800019ef265100456f84354df000be4506aad7555b1467 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185981 Malicious code in callback-upgrade-ophiuchus-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02a0e7ea27c39c0994bad0e12f99255722091fc3c0df8286c617e33cbe7a8d4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186318 Malicious code in cors-relay-mini-css-extract-plugin-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45b5d4138a7e858f7a94edc8c60c8746ad366a44ba1f9fafa3a7461ac2cca612 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188469 Malicious code in orbit-typeorm-nucleosynthesis-tectonic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dd0f8906ebfbf9c904bb008379e1ef26813caad53f6b2009b17913f630de464 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187784 Malicious code in library-volcanology-magnetosphere-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 708f64ae257d4aca048c20cf895d70f55011231980d876ebe03f4b405952b3a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189451 Malicious code in serialize-eta-authenticate-authorize-sigma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87ea06d5abf8267496be3939dc050bc4f5ec41b7b70514d1731aa0c872d926cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189131 Malicious code in registry-relay-electron-builder-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a67c1995ab1976896034e028ee640c5ae740b13db01b79296b2487d4d3fcf022 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188529 Malicious code in paleomagnetism-playwright-blackhole-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a3ac923ef3e0b0386e7575fe8798cedb5b699921978d28e61fc8bdbe8f8eaab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186715 Malicious code in element-ui-nconf-oauth-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4fb80ab7cb345deae95e9acd799044d7c7a2e26647d6c158c687da329783e0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188007 Malicious code in metalsmith-ganymede-gravitationalwave-biogeochemistry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd371531b6504d7302f781d1d49aa918cc42e03fda931b017ec70b39844a114a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189770 Malicious code in supernova-webdriver-mocha-centauri-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2f0154b6bd89e8afefb374086dc7216cbbabd0a804186d702613d53503d4fdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189183 Malicious code in report-serialize-rho-public-file (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62de5b36b23d92c1a388e80fe1d3dc55ee676535110f4175eb6a428aea0d3191 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187975 Malicious code in meissa-polaris-pulsar-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55be14a3895b75568b753b0dbb7e610f2c1ea7657cf1dbb55f0d70db002b25a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187818 Malicious code in lint-staged-tailwindcss-altair-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf7fde528fcb735413f5b059ae0d9ccce85ff5d01e66637d1759cb7a0dfd4869 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186138 Malicious code in chi-omega-permission-analyze-warn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1a333a6ba154a9285b807d782dbb2c72106fe930ef975007fb54ac5d2a6d251 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...