MAL-2025-148438 Malicious code in tailwindcss-altair-pavo-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d86fe2b5c9951a31ac9bf3e5536a7fc468a21cb1dbdcb6e12a8e3f736aede389 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146971 Malicious code in query-lint-staged-library-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc90179ed88a2d01fd66d407303c1ceeb80aeb0b9e92f750ef26f04cfe203e92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145061 Malicious code in miranda-toml-xenon-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dee0f69be118b6fa662a522d7925c52d6fd145c596702b2748315a189fa3937 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146964 Malicious code in query-bellatrix-helmet-spectron-webdriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea2fcbba4aafcd8739a6c5c1f7fb79638cda46c72a032d077c17689398101f49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142986 Malicious code in got-run-script-proxima-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfa04a34a8e56c5c772f14564f419592876e974653aa8279f0dfc3c83c0256b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143714 Malicious code in iota-centaurus-redis-terser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe3e7e68755dc92c710315c82d460fa1dc8e971f7f6c85700232c5ed52dc7b20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139752 Malicious code in auth0-materialize-electron-xerxes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ed6bade7d741e881a1ad5db1fc1aee5b73c774ecea26fd42ad6d9811499188b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141159 Malicious code in corvus-luna-chromedriver-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abc57845ad897dab7e51dc698f8f4a85f4640e5b4759380e4673f476f8d7a59f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142638 Malicious code in fornax-miranda-dotenv-parse-variables-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc5daaca5d8d981787420bdbbc174f4e8024aff81ca636c0c7c87a2a68d4f315 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142578 Malicious code in forever-webpack-toml-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3925f8ae19c8fae12616fe0c2646581e2ce71c1570dba86b15346e834d836dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146172 Malicious code in phoebe-prompts-hercules-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5a51660212c8f8e17ba061c5d3c1287bece955ade4374abc8c6d27c3156ddb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146132 Malicious code in phenomic-eleventy-dynamo-mini-css-extract-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac8ffa5a0a2483040dc326a5955aef7ef99f3a3863e61f50c2ae5b4f40e8491b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140717 Malicious code in charon-apollo-ganymede-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a453ab8306131fbef52d8e12174348e51bbd1e7c604b02ca83a55b33e146a9af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145230 Malicious code in mutation-rehype-semantic-ui-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c63b37a2968b52d30a65cffb26b3cb03a9d59890b2e68c2fc5d0da907d08f082 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149619 Malicious code in xanthus-build-development-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a806dd95a5e6b3269527ab019eececbf5dbde8ce953c2f0a04ea6db7460bb15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140571 Malicious code in ceres-lynx-upgrade-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82af15cc688492a87f753018c2a22b0de6ab6047cda2e5cd8a4d9ea67d74dfd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143661 Malicious code in inquirer-spinner-telesto-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e0294e295c2ae89b686d770fc2b0353de0de502b05e556a841e35e6ec93d895 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meissa-wolf-server-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 415cc67a74743d56b584974cbe4bdd788fd9b44edea0c49f73e87804b457687f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143199 Malicious code in hapi-winston-halley-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ffb4375f00365f06b4c9ac37c81f570c287f324505bbc1a3f0f648ee87cba9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144671 Malicious code in magellan-uninstall-centaurus-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37ad5306a1123b19371e6791f190ffcd8958f9c820d5414582fdb3cfb0d7088b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...