MAL-2025-142578 Malicious code in forever-webpack-toml-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3925f8ae19c8fae12616fe0c2646581e2ce71c1570dba86b15346e834d836dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139218 Malicious code in adonis-tool-optimize-css-assets-webpack-plugin-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58cbea89b1590dfaf1c1a7c79d7ddd345b6fe22f88c4bc58a03e5964dffc81fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141021 Malicious code in config-foundation-equinox-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b24c8251b01481291011c1b04906ea934e07da3ad0d80c98d0376d16886f325 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139752 Malicious code in auth0-materialize-electron-xerxes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ed6bade7d741e881a1ad5db1fc1aee5b73c774ecea26fd42ad6d9811499188b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144402 Malicious code in link-celeste-tool-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2940880bf1d8c4a59946e40191d36c5f69ea5634131d16fbb222ce6b121f99b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142344 Malicious code in exec-indus-quark-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaeff126d4d9dae822df5c1ba07200edc2513a45a3299d7100ab54cfe4c4a5ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149100 Malicious code in vega-websockets-xenos-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac3e6d08eea3c219f483b46b25ddf71b0bef83e3ad8e1f1c0ab3c195e3b5b306 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144867 Malicious code in mensa-typeorm-node-sass-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80132cdc461affdf7236191c74d5743e4c51d95a47f4df8fa13817817dda1051 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139453 Malicious code in antd-dagda-optimize-css-assets-webpack-plugin-remark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4904d6c2f02b50ea44fe5a7af9560547a704cbe0801ceb932c40c6207413bfba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140082 Malicious code in bootes-iota-sagitta-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b591b6fecf503c9168c2bfa57bb3c5d06274f8c76955b313a261d043f484f65c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142888 Malicious code in geckodriver-venus-halley-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0a32a0aa8955f2fb5fc4b2b9c04ff34febb8f8fafdbb9a574bac80deff7ee59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146176 Malicious code in phoebe-rimraf-transport-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d320839b4d250dc51a6c8d4afcf02325f2d067157ca501e732ebea5362aa8ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140640 Malicious code in chalk-gemini-nconf-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee6261de89befe399d7560948dc5c6cfa28a821c2887121fb8f9e613cc581c24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147525 Malicious code in rollup-plugin-virgo-uninstall-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7cc1cd4a3e777bd49016825a24c4c7a755c151eb512398e15a68e7353828ab0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144698 Malicious code in markdown-pdf-oberon-rest-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6736e26ccfb46fa55ed3f0c9f17c3723e146a0902526a7486246a1f5ab8b426 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140571 Malicious code in ceres-lynx-upgrade-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82af15cc688492a87f753018c2a22b0de6ab6047cda2e5cd8a4d9ea67d74dfd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143661 Malicious code in inquirer-spinner-telesto-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e0294e295c2ae89b686d770fc2b0353de0de502b05e556a841e35e6ec93d895 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148470 Malicious code in taurus-kaus-server-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b7bb0fb0cdd24f0b62b321af0a5366d6e6918552563a5647bf9fa2c345e93bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146332 Malicious code in polaris-cors-oberon-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebdcdc635f425c0eaadafef3b4fe170b59d7a87731c13c7cb88962e27594473a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146302 Malicious code in pm2-loop-izar-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 438fca0b19ba97c3e5e51640fa7210c3677d4e07d791cd09842ce448342e4bb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...