MAL-2025-143916 Malicious code in jekyll-transport-fusion-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90acc8ffa85bac80ebe5f7d7f7ff730194b5d208154fe0f059cf44abad400c98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142196 Malicious code in eslint-config-cygnus-mocha-optimize-css-assets-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05f67e951f4eefa63bc1ac813069ccc0c9cc51da654142f51675ec834ca46ee2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139826 Malicious code in axios-docusaurus-node-sass-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edbb6d2fb12bad9e44295778236ba91dbbdac0b8e668c461c5030b7c439e518a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144790 Malicious code in meissa-antares-supervisor-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a09f4ddcb018438b0b63a3a30b356cdb42e8581f7032e635f9dbcda1f949894b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144732 Malicious code in markdownlint-zephyr-perseus-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2635991b7d8ec4de019d0f6887e3fe94ceae95748053607f691bf9178543ef21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139731 Malicious code in auth-tethys-duplex-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5118548c8190c3f375c9f5128d029bf31797ee6cf9feddc4180b3f4efd440584 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147268 Malicious code in repository-json-pino-chariklo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 978d0a10060a9f7559ff23ce30037fc4054b3b97f8c91146b25d2059d4a471eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140603 Malicious code in chai-protractor-dotenv-parse-variables-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 311891f26ac9a5040a4dac757ffcaa479e02747a94a46ff8e9d59c7df2a7df70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140722 Malicious code in charon-inquirer-bellatrix-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a45ddb73e1ae89fa61983ff99b6536cb6dd6cf474fb310c407b8cad8b5533fb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139823 Malicious code in axios-css-minimizer-webpack-plugin-bulma-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d5adb38887f09011db745f6642437e47823d8099f72287dc1c786e7a899d187 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140570 Malicious code in ceres-loopback-sequelize-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d41931976c004d89c852a678bc51be3e40ffa196f8850fa53ff966d073391c22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141601 Malicious code in despina-nightmare-grunt-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76b9929aa7b277334fc38d873c4779114970d886db7dbfc06272eae08e82a285 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147792 Malicious code in sedna-semantic-release-gridsome-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 200f5eb4d63522bd7104b3839da11edf43c7e7966ba5db0d95c58bb23422c0e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148159 Malicious code in spica-cypress-barnard-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6102adc00966ba285ca48a5b0c9ef6bedbd9b1c15e55c5c56f7a6b132206d191 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147856 Malicious code in semantic-ui-schema-kastra-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c78ff75cca6dce1a6065ec67baffcff08f761cb7c53cc45a0ab0529a5d9b0bc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139734 Malicious code in auth-yaml-slides-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d881b1b3d4ec241b1d53851ebff5ff1140a61b69a53a01c345a14b962fc49d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139708 Malicious code in aurora-publish-markdown-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a6c37dc5bc5d8fcb554dbf6f064affdc92e9b34a5aeca6ceebbeee20d52be0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144687 Malicious code in markdown-pdf-callisto-lint-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb134446e468c46e4ca3d83d7094d21bafd81c5f717f091744634024b17d9c94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144137 Malicious code in kaus-bellatrix-async-astro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4ef429d9f796ffdace8a3f703b2ae5197b3a9ee8fafd196f82b1f31c7c80adc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146843 Malicious code in pulsar-repository-uglify-js-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad346edfd4edd2e29551090c05102d6a12d79b3fab9648346b880d2e34714ac3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...