MAL-2025-141724 Malicious code in dotenv-parse-variables-jwt-soap-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1ba016402a8e1f026cecd68e7a2e6cd6724f0a32d050b391c7016e08c40022a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146456 Malicious code in prettier-betelgeuse-element-ui-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68efeb737b282e971935a9cda9fa864a335f36aa3703e33e981d09cd415fd060 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146766 Malicious code in public-postcss-loader-nconf-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc8486c705b8b7152ab39cebfac6f20436a00b56f90d0140031aca814832186d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142235 Malicious code in eslint-plugin-perseus-css-loader-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f0ddf1aabd198f85639e9d3b3af0ae998cbc891b75eba766e8f9d4bc57097d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146987 Malicious code in quito-apollo-europa-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b4eb6051a4b9dbc341e909f1b7140e2b5d8827337159c41ee2252851b56fe9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mensa-antares-yaml-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2158db6a93e45b802d98978535699fb91afd8047a20243a62aaf72204c09e35a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in link-babel-rehype-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e06c6128285df382318c7cbfc0ab35b0ede2d70825130103f6a655c3d8ab296 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sails-aquarius-elektra-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98a55c0fac4c3569449fdc116417d05fb97f310e65f036c7e35510fb8e9d4bfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139865 Malicious code in babel-jovian-despina-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2823367bbc3c7c96040c5a58d99c6d21a66d43a7f43c856472b6e49615b3b84e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144751 Malicious code in materialize-puppeteer-wasat-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43a563a4ebbc263d311bbc1282a62b76d3289a89eea661bf5c04aa50829af776 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147466 Malicious code in rocket-fornax-capella-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e8732fe50bec3c6b6e71c1fd8664ac16a6bfbc32a67a0b35570201c393fa870 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144517 Malicious code in loglevel-postcss-pm2-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae6d4afa28a9628ecfb6e0b0eb4f27f38b1d5613f1ce514308c1586e70ed2b1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142002 Malicious code in eleventy-lacerta-private-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ee64091f763f6cd601e7470176a085b208a5ed98f1bf424ab4613c439eb7d79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147280 Malicious code in repository-prompts-rate-limiter-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cf377bb81f4927325b2351ce7a12400024c12876e52b462e3cd4f8643761011 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148597 Malicious code in testcafe-impulse-auth-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64732d5d350c59fb14734adda2ccff709e55376ab5ba173f1fea28934181bf73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145092 Malicious code in mocha-sedna-css-minimizer-webpack-plugin-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8604a20f4f2d848230348bc9bf7b4018a8578f21adeacab02ee39ba2a9d08702 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145431 Malicious code in nightmare-cli-ursa-phenomic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c815f45736f8f59bd1582476c431a200edfecc2b39875a5ab386550f4e203eb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149169 Malicious code in virgo-scorpius-duplex-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94ba2c6e8699676484b8d7953e6c0d7b38439794a27dc8a4a4f1f2ca065d099a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139552 Malicious code in aquarius-style-loader-start-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbade8880dc67ab4b3c30a53231a5674f8423bf4e4f1675abf948cf7db1e08bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144492 Malicious code in local-ophiuchus-nestjs-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59cd933085d0b9483abff3eb45913d7b54297b05a44b9f5e4ef509dc60cea257 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...