MAL-2025-149690 Malicious code in xenos-style-loader-transport-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8207d9edb05f31592dc56be9b98d0e2ac56c7bb7c766278adf76b39dcd12b72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148182 Malicious code in spica-terser-rimraf-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f85c5ae642215aab8b0b119876bbc8656b8061b80381484e9e2b94aa377a65f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145352 Malicious code in neptune-aurora-backend-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dfb10cac4b5a1dfb6a498b2742fde2ada9966efaa48a9f65f9142d0b3af950b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140661 Malicious code in chalk-xanthus-repository-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e114af5f4c3f34ce30645b799ef566a3aed7d0a103b438d1a2fc83cca45530d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141325 Malicious code in css-minimizer-webpack-plugin-eleventy-writable-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16c809fff64854b81d5e2dd566778b8b3f0b3593ce2d0a3267e2f2772472b028 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143168 Malicious code in halley-spectron-rimraf-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e73c947e71aa2563113e69cae4a5ed27b095147d625872993d40c732a020be3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147447 Malicious code in rimraf-concurrently-release-it-impulse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a62a3d550574f8a05abf6d282d8cf72319f5b6ce6dfd100ffbf7cb35777ee8a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146634 Malicious code in promise-castor-pyxis-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11e998a570333fa94903c03deacaff2fab31b844d926782cde24c805305d916e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141114 Malicious code in cors-antares-commitlint-config-angular-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d65e5b472bad4d63da0737aa8f5c719df563456c73b01cfda2fccc25d6db55f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146909 Malicious code in quantum-mensa-callback-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5c4af59ccdf081d321a6234c0e30dc04ed83eeaf768d85866f80c9b81d02f91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in altair-nebula-vulcan-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3fb43d337f3d549421664d53fe2d3de498727cee05007b2f16093d683b6bff2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jsonp-framework-izar-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0734ca78805b9c044c458383ecb8b4c15a2579a261b02200ff4d62a149964f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in leda-capella-celeste-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62504e796bd511f6ae8435cfb9929446aaf2fd1b492445401e5490987615812d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hapi-public-unuk-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98d5a3b35db50fa8d9809095d9a28923d3f8749ef04d21133640662959f81ad8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auth-mysql-element-ui-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78b0b37c887e82b3f21d7c2b6fc291bf49b40f5d203b7087a9ba391acf920be8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145013 Malicious code in mira-perseus-delphinus-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 370b99d13baa843ec3e6b05367062a9a8f526f0778000ba19ff3e22729a31288 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148725 Malicious code in toml-version-docusaurus-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb161afc3d9dd4d496a79612aec44fc8f74b2108cbd00da73462e7be4619981d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147252 Malicious code in remark-mensa-publish-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 003577839990280047a1046223cb273300b3f2619f3543ae9904c38dd6fd630b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140929 Malicious code in commitizen-dotenv-safe-tool-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38a398c58fa355d8d568dce0775167b9257cb7d5de6497c9866d0ff2b45e2259 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wasat-draco-izar-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d637d2ce4aa2c840283bbb45f4f703c277c08548669ed22ee03f7ea74bd5d784 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...