MAL-2025-149513 Malicious code in winston-neptune-vuepress-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33b712155c96b30a4ed41560b5bf64d0a1e0d4bf7ed6f5d00344ac8204ffaccb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147604 Malicious code in sagitta-luna-uninstall-sadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f782191c278c6bc57c441f785dd87f2e95bd22c25c583321e8ff771f44a1e2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144499 Malicious code in local-sequelize-spectron-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5a39a04c280b71bc9a697c00c880362eeadfc5608b3869515b2c571eb798f5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147838 Malicious code in semantic-release-umbriel-enif-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6bb1f785eb64e0a40223521ed9ed051193125258100917655fcbadf2b3985bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146279 Malicious code in playwright-cressida-rehype-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b237a8e7e14667378d4e2a7e5359081b1055c933aacd152a5534f93d3d31de7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139992 Malicious code in betelgeuse-nconf-mongoose-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6c7e9ccfbb66030779cfdb08d5974f09dae0bd9b40fce68f9703983ce096da8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144986 Malicious code in mini-css-extract-plugin-passport-centaurus-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37136266f9b1a7e07941b1535dd53c5091980321a58539fec65f01dbc02bbedd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146588 Malicious code in procyon-electron-private-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1abd1fbf5cd8388dffa1c895ff29edb594569791ac53d32d1bd721ba68fab52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139556 Malicious code in aquarius-venus-nodejs-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dc2e66c5e746f8022215dc50cec9024ea7c7a0932e369c235ebe321beb13fe8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141001 Malicious code in concurrently-apex-promise-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d31d0ae3ce5ebb4e1ee8fa5cfdc8150711786b2c1ab557ca0984b632bcb038f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145774 Malicious code in octans-mensa-public-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c13e568f7a5b0b22ad6c893e61262a0f930cd561b8640a831a4153fa174e88c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146992 Malicious code in quito-firebase-supervisor-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5a09f7f0d9ead6a273ab5178cea56b022f83751858faba9668dbe82686d7978 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146340 Malicious code in polaris-europa-csv-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3938c219c4816460cc37546a2fc49b42bd9f2df9bd9194194149724d94c575ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145434 Malicious code in nightmare-envconfig-nestjs-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ce283718877e46946175f033597ea72cdc7ff55bfdf108784806ef510eb5bbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139589 Malicious code in ariel-indus-telesto-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e010405cee714fc544f42d8632a9cd0c8322ff38222e8bb03224e51fc0cd1eb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145016 Malicious code in mira-polaris-forever-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9839ca6c0ed2a3abb6097d7ab67e407b1aa3ab53b40751672e7c85aeabc8394a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145108 Malicious code in module-lint-rehype-optimize-css-assets-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2939b8efc57b0447f1e6a1c6ac30eb1b3c5f6a835d155211f5ef7e8a4b2a4009 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141668 Malicious code in docusaurus-ignite-chalk-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0ac628852778f49428df04f0f333889e78112037446428392da60d03dec11e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143913 Malicious code in jekyll-quark-sync-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa7835916f3c4f8b37024734e440a3eb602cfc77184e289072d3fc20399511ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147844 Malicious code in semantic-ui-dione-graphql-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53702f4357ae4812cdd90f852efcc1e208cdb37c1d724570bfc11046a3a0dfbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...