MAL-2025-187137 Malicious code in gemini-gravity-xanadu-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ef8b0e335c02e9e3202c8e0195d3bfd55501baef7ef0af424b6b5b8eb2310c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187602 Malicious code in jekyll-less-npm-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dbfe23271c900f951f36875d53f77f39ffe4fd6d1d97cb14618347003c907cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189857 Malicious code in telesto-redis-ophiuchus-radioastronomy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd255c82666656e5ebb6489494556acba1451caf6565cb1bf4c48216738e7c58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185519 Malicious code in archaeoastronomy-blaze-panspermia-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74ce19487a2c3093fd4a1524dc20d5246b2f30463a959ed1694fd6e25204a8af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186982 Malicious code in final-uglify-decrypt-enum-data (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51cf34266ad37aa88ee54ca8fef0e48089c1c23d25a4a498c6d0188672152636 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185793 Malicious code in betelgeuse-gammarayburst-puppeteer-rehype (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5130958447a541346c610348c14c00f249776c21a7f1dcc342652db121fd6f92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189210 Malicious code in rest-auriga-bellatrix-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b86da353d85dffaff66eee00db788ffbba664110467cbb9f4b56baabf574c9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186732 Malicious code in enceladus-got-ultra-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32239f7dbc5399708cd1356919a8314d11782fff280d08afb68b2a936bd12671 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185525 Malicious code in archaeogenetics-ganymede-paleoceanography-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 074f632db2abe61d259b3bc4c1f8b0dace7f1c727cfead5c4c2611a7642171c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189372 Malicious code in scale-phi-deserialize-nu-sed (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3da7cfb294f277c58d7e8fe6484b55c4210fc860ea9b97bd8165568c264fb168 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190116 Malicious code in ursa-readable-astrophysics-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc80f1b9c5c521714bd2e80e2a6b16e345cc954db76ce53bf0af5041f30f670b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190397 Malicious code in xml-phoebe-protoplanetarydisk-magnetar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98ca626683d12f3dda463525e94c3b5a5a37cc063cf1a9be277a2684f5d017f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188513 Malicious code in paleoclimatology-node-sass-asteroid-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44d11927628a582b335587691209c5d269ac29f4ecf3d85eb1612706326c4974 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187854 Malicious code in long-alpha-code-sun-table (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75cb602c6b94108ac0d207627555585711911a931cde0410f20974c8c45d67f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190412 Malicious code in xo-quasarjet-publish-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c1763e867baae066a361ba80be285839da38a3fe2e509a8cef6c0361ce3d3b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186406 Malicious code in csrf-bootes-html-webpack-plugin-ichnology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42e683c14d1e59c58cadcd514400f46ff49670101cb068cc2ecf1d95b413dcf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185581 Malicious code in asthenosphere-auth-andromeda-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd65aac5664169f28da94ba7b0b9b5e1ddc284c8fb135b806e87c8c47b844445 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186733 Malicious code in enceladus-mdx-zenobia-blazar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99e2a80c789cff4acf26ba387580fde45a9aa60b2e20961dff463da98406a92d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186376 Malicious code in cron-tree-query-unix-report (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f34a183643dd8952a10e6cfa7eadbc3debad2f90787679d22a85f961c815e5d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187155 Malicious code in geoarchaeology-ora-titan-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a806a3cf3dda3c3eebe62d2f064979deff4dc5be13189bf1b05b046a1a60a856 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...