MAL-2025-149757 Malicious code in xo-sirius-cors-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a706eabb5bc1ada3cbadf53709853d49ed268736f58f26c9c2c37e6a7549e09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139460 Malicious code in antd-loglevel-triton-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d1fd01320a90acbedaabde228264716f942b3ba95713dbc21b187caaa492d57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141856 Malicious code in eclipse-nightmare-framework-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a93d0c499421d82973f4df93cf56abf3d08dc50da7eed95c154c8b6566c2cc6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141692 Malicious code in dorado-local-dotenv-safe-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d65cf7abaf0a3cc4bc9be9d18b01ff806f8e740363dee4a0772a1daa3691af8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in graphql-umbriel-enceladus-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95df253aa63bcd8287944401dcbc32701f552deeffcf87cb251266f1c84051c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hercules-docusaurus-css-minimizer-webpack-plugin-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77bd218322e86db28fceb788d64cf846a6cef2d7f0faec2e9ffed93d116f446d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139990 Malicious code in betelgeuse-mocha-request-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df02491b09b3446d54df684676d132a42d9464b0f5c8f0330438655a1c2bccac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in materialize-postcss-triton-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e806cad24fc90b3611ebe78f4acf26d974be1fca9b6f1a37555a0267101d4ea9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139392 Malicious code in antares-auth-thuban-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45c3046a640463c0c5ad0bbe94e2f92ee4bb4bdc71323242d72796c0d5abed32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149057 Malicious code in ursa-hapi-nextjs-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bc029820500dd4024972c48dd57913360342c872ec20c9566e573b7bfa03dd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142525 Malicious code in flare-gridsome-sirius-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27d4b1fe500ee2effe967bf7ba30e6d290cc8f00e8f726d25fa86929dd3669d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146523 Malicious code in prettier-stylelint-webdriverio-xerxes-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a46c7044db02697faa91ea47e9e00a9fe04e7e7215ebd93e223558d8c16fd72e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141598 Malicious code in despina-hermes-changelog-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f593752911d8dfe88e08602cf920db91edbff3a993835df1bc6faeb4ecb3f785 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147236 Malicious code in release-it-tailwindcss-pyxis-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32c7fb83cb976f0a3f94a4a1e3c7d374d787061d36463088b0c416549d24f944 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147387 Malicious code in restart-octans-kastra-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afb07606dd886e1bdb0d5bfcbbff59795c376489c1df9985da7c1ba407f7d97e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147608 Malicious code in sagitta-perseus-figures-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 452e605a18f208fe46fa3e4d4992aebe5353745e31e801be95b70bd416fe8ac3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147068 Malicious code in react-bootstrap-native-rehype-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c731557ff748c3b450e7f9a142a04f4182d48cb705f4ec926d465475eb2b7a06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-config-supervisor-figures-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5e8dc82658386166636f6748e27672a190294e705b2ebc6767c5e4b235b172d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umbriel-install-cygnus-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3984b121116c51f60b755a0d8e1f5a46665a65c3bbd051e40d65369d4d8d75cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in karma-heka-shelljs-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a1321402d373619ab428b9424583b9f795bb5713d9ceb5a919bcf553760974a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...