MAL-2025-144774 Malicious code in mdx-react-bootstrap-javascript-impulse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1e1744c55940a789327d9b33cc8d592c73c78aba0180a6c3d6f4db1c9a6d740 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141928 Malicious code in electron-reveal-md-gravity-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23c378215038e150535e23dd20905375fa9904d58db75526757f188d9fcc94f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147274 Malicious code in repository-meissa-commitizen-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48e26e15537f1f0a2acb7d8e087140912aaeaa25fce5623fe76057bc299a546e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139823 Malicious code in axios-css-minimizer-webpack-plugin-bulma-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d5adb38887f09011db745f6642437e47823d8099f72287dc1c786e7a899d187 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147154 Malicious code in regulus-phoebe-corvus-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0151e5068dc5bce9091a6d205c89061fe9513c7fc09dd31cd433c06dd39012bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144576 Malicious code in luna-pegasus-nconf-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0fa455b2059614d207d686005cf0890c87f2061d148044477b6e8eafff85443 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141897 Malicious code in electron-builder-async-titan-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c690f72ead4503a4b4b6d46e71c1cb99c00b8cab8ad786b3f3c7880a8b8542a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143989 Malicious code in jsonp-blitz-cordelia-less-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e9a2d48029e6469105d9d04046b04f81c2e0c08dcaad383e50ec9eb573552b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146404 Malicious code in postcss-loader-oauth-chai-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c48c54ba2e46e0cf1db9575bf6d04ad71d5e2ff725f1353c8b6b9d03cdf82fcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139438 Malicious code in antares-sedna-rest-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bd8d5a7d225f8bcf97b5fbc42898687fda8150484ad69294c8d1fbdc15d1347 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cli-rimraf-callback-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 507b5deb9e378a4729ae079af92904564d22a267bae8b21fe5e7db7342c1e2cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in titan-ganymede-cypress-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fd6e41a91413ea14979cf90c42cbe9942a3e2691daf8927c8158eef192882f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upgrade-jovian-yakutsk-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 942daf1809f1a933ec556875072240b54cce259a5cafdd8782ecc48976749009 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oberon-io-thuban-draco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91e81b30691489bb6dc1477cfaf24ce6eb3eeecd6f57a6188f5d9eeb9365266f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uglify-js-query-rest-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f7ddb9154d6ffab0c9c7227bb580b74dbe26895e4f866fcc6479c477cd2e568 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ariel-bellatrix-postcss-loader-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5f58a61a1c9e7b168034026bd7f3fbc855466854bd12522712eb602f4b62e32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lacerta-thuban-dynamo-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c65ac397f9b36d38dee1f9ef9aa1169d6ff2d191616d1632ac41ab0c66a98756 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jasmine-ursa-resolvers-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25c80819ffed81f8025307256957f70a647148d6e5f6fd9033a58fe0a3de2494 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in taurus-mdx-promise-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6c325e367241c5e965dea2194667e8e615c49c2186c63d7e8bff622220960ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vuetify-ini-framework-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd1ea7eeee9dc7efb74efdee65854ad1c7cafd35be5c51a28e7a4f8938efa4b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...