MAL-2025-187892 Malicious code in lyra-nebula-node-config-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71da1d08ee103264b969b081db8fc81219689df4fcc9605329c81bbdd888fe5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188051 Malicious code in mini-css-extract-plugin-sass-loader-rigel-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fe9a6b23b21092ab2bd83b9e89a384348c1d00f2d049614dcc96e1383503620 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186517 Malicious code in deimos-koa-build-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a36c41fcb310eff78aafc5e8df244c1040a53162533a3e6f7026cd926873e7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189628 Malicious code in spinner-rest-standard-writable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebdb152aca673463af38f743b1775bb01844887f70361930a578a2fcac67ff80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189699 Malicious code in string-optimize-class-link-authorize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4842e2140b6bf57da907bbad5a736fa6486b1a8d4f05cb635d68414d5295b204 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189454 Malicious code in serialize-quick-alpha-book-resolve (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c3a965104bed503baf5938acd3d4dda26b3d1e3317487000bed52dba4bc6959 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189851 Malicious code in tectonophysics-transform-crust-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 362c7a3c2a387c1b0b23c2ad16e0ff6e12215ac224b7fe3f752d831110cf1fcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189773 Malicious code in superposition-enif-genomics-australis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b19039f799c264b55268ec78deda7724532392d55f4d90094459c77fbf12ee3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185954 Malicious code in byte-assert-finally-hot-sanitize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 182a5304e0975eab148e7260e5e3682cc7bfe2d1b2dfda22515c7d7e3b6e02b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189319 Malicious code in sagitta-publish-wasat-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cb333963f806358968a273c2116974e640b3616d2d94f90aa813485152c384f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187165 Malicious code in geodynamo-stop-hexo-markdown-pdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eca0a2915c66dd42a7b4e7dd744b1a10f4f2a0085b8213be501a8ef39cde5d35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186634 Malicious code in double-grid-resolve-data-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec84b8cf5799e8ac659af511e2e198a7e75ad80f432bb110d8f87a68bdef0b35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187502 Malicious code in integer-optimize-alpha-byte-authenticate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3cc0597617c50b1abbdb88a4a1f29177a51dd4efc9e1e4472762f2d4125f247 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in warp-jwt-mongoose-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8401e65a080266a220375bbacfb5ac32aaee20af15f0f37929bdad4bf41c1b29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in key-encrypt-bad-class-kernel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f34deec438e96ceca214bae93f61a23a54113b89535960b575acb32a4857fc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scripts-yaml-janus-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef6ee6e47d29dabed3deb7f87e614e389d9e327843fdbb45445af49f77255504 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in refactor-cat-epsilon-interface-monitor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 936aecd5ce3be34ebc0072e78c7c6dce28d37fa9462635513930d07f7ba9df73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in server-redis-umbra-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70ad1596bcc3e80829a1c46d11fe776c209f88cc4388e02ed286d6ad1976e9e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slidev-parallax-epimetheus-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9648e5930b748de1f16364db1c8526b6da10543ce9ccd1179eef4cf83479a823 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoebe-borealis-vuepress-coronalmassejection (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deaa586f7a513b8036116d867f85c2889429e1affc2ab69c5e417d09987ff2ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...