MAL-2025-141328 Malicious code in css-minimizer-webpack-plugin-hyperion-websockets-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00e20a22a9c22769398e8739c99b3cb32ee807c0d7b81540638278571f89a9d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147652 Malicious code in sails-markdownlint-husky-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deac6805d708e640aa50b6d65b29fad2ecf88b4cf854aacaa08dc114863dfcc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139838 Malicious code in axios-spawn-metalsmith-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f3bb3d243839289eaa35ed8d5891af6115202b3b623619514dda00aefd13d2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144024 Malicious code in juno-elektra-tethys-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccd6a416be129d48542f77dac831defe147dcb7b21c8048a07c1b70bcabd3b76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140907 Malicious code in command-ignite-ora-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0aadce1574a3d69fddbe0444e990e9999b4aebd9c2e59557f2f9802a0deed3ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139202 Malicious code in achernar-morgan-gulp-octans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a498c5b041add19cd34cff6f6ea4b481d4f6807e31d95256fdfcc433fba769e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146633 Malicious code in promise-bellatrix-helios-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e2bc2261e80b41b4ab426dc70dd2937838890d8d5ea543a3819a37e3e44e920 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139901 Malicious code in barnard-andromeda-indus-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 304c748107942127c7c1d160a9a483e68ef0f9a68ac202f5da185715afdbcda4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149266 Malicious code in warp-comet-csrf-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95efdb76a77c45a47564e1fc7a242ae41eeaa72b4429cab3af068e68a2d8772a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139967 Malicious code in betelgeuse-aquarius-sirius-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f07e412e513ac365bad2e9f801d69d619cf61540fe79e8be6ab198c3492d5cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141956 Malicious code in elektra-xenos-hyperion-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 622e4cf898444df4d0d6ae7bbb2c00661a7a28fe96576b4b7a4e0661621304e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147618 Malicious code in sagitta-sirius-express-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f087754848ecd4b5049a7ae0f8fba20fb2b743ebb27991b80416ff6cea727a76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144862 Malicious code in mensa-readable-nuxtjs-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 996539962812e89f55620996e24305e3dcbcd5363dcbbfa86f32540a8183ba45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149873 Malicious code in zenobia-sails-chariklo-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbd4814d994186a5660f22e03e2f758cbfca20ba3b3dd80dd97a01dac7ca3a87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146231 Malicious code in pino-pretty-comet-apollo-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce0fc55dc02578c07a1ca82888f7559c7f7490d510463dac842eddb8680878a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145238 Malicious code in mysql-atlas-heka-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0384815d3d82925d444400be8eccab822c1dcac4b808e9376d9a9aaee606a5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144292 Malicious code in leda-scorpius-fusion-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95c2368d5e556c53b4ae55edbda2692a0cbd772956bc8ffd3bdd54d97d120dc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in backend-run-script-chariklo-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbceff9779dbaeab7c032e371182689bc834cf52fe500c6ef39d7e87ecc0da67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148697 Malicious code in titan-venus-iota-jabbah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a805c600afde8818b0e2e52cf4d91aae02df504a12beb8cc8d54071c3139ba43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149175 Malicious code in virgo-xo-writable-norma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a988f0de965c3f72dc8524142cd72070b2d172dec3c81c688da6051723cacfe2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...