MAL-2025-141042 Malicious code in config-umbriel-tailwindcss-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b504ad2784be5eabf4f348d8bacc2bca3fca7f160530f9e1132f55d1142e1d68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144047 Malicious code in jupiter-altair-sagitta-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2cbf7ce2f61cd396dd92768cf8f3c8b83ebd104b8aa54aac8d1ae5356dca391 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147746 Malicious code in scripts-sadr-parcel-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39d4129ff9bff98bbff961f993a0ce01ca0fe2ec0098fc4f27ecfb22382b00c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143265 Malicious code in helmet-taurus-json-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fa8f878080b3f1d618d77198ffe1d437ac4e94d3ba1fcd544bb172f8ea9a1ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149726 Malicious code in xerxes-yaml-ini-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ded0ab57406dd6b25eed7c5ecfac3f5c9075e59f938608e40d47ab3b68cb6e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148599 Malicious code in testcafe-ophiuchus-xo-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f21214842cd4cf23c4aed99f5eb4277c186325847a0fc2aab7e2c03f867aecc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148484 Malicious code in taurus-weywot-zenobia-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 542d620ec307287a2edecb637cf7d0cc4db339f51baa18744193fc284ddb2748 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139957 Malicious code in bellatrix-spawn-iota-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e02a2735f04330ceaa2f373020d5d6d3640831bf53b240730c047be4df17a12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143016 Malicious code in gravity-arcturus-auriga-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4e16402638aeed0613b6f982c6a3151ec789269a707550d1762c4eb988453a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139365 Malicious code in altair-sails-izar-warp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afe12116a5a42b21c1503042a0ee999073c715b3155d77fbd19d739f3d29e19e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147732 Malicious code in scripts-foundation-resolvers-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c9bbce27bec68a8aea224727202223aabb0cbbb29433c1d00dc58f3a48262bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in request-css-minimizer-webpack-plugin-resolvers-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c589217cfc86f7c8e3f88b2b6a0e481940efe817e8590641395b29878ff94cd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140140 Malicious code in browserify-readable-mysql-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bdc48c23beb6dca987010f9cde20f17059008b360afeca9729396198f89faa2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145900 Malicious code in ora-yaml-yildun-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09671570cc0ec4dbf6e1be086b159d12ee823cd32564bfae08539f2b51fce710 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142983 Malicious code in got-quark-charon-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2791fdb726654cfab79699ec9ea9331cf5f86011d5e2d08bda7ac54d9a50486 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141609 Malicious code in despina-standard-sagitta-norma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a8b128c16f6b38c7b05d3ab353887054659ab8b044b6ec98883887ecdf90940 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cz-conventional-changelog-json-postcss-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbd6de2a6c0372ae79850650d8940ec76ca71a9960035df0b80f22d78e6b270e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141620 Malicious code in development-exec-spawn-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a304c47087ce6235ea11d67ae22402da93443f443c701408982475b773bcb42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148244 Malicious code in sqlite-typeorm-fusion-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93f84983ab73c9eea07dd2f6ad3e21269897e93ae04d3867139b5be6736fb55a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143148 Malicious code in halley-install-pavo-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebf4e6027a9e5ed23f0c187619d11b350f940038da89434376ae24c57a4c84cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...