MAL-2025-147629 Malicious code in sagitta-webpack-karma-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a292850308a455a38f1dd6bcfcc0ff11ffa9c15f7cb817a8023b7dea243468ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avior-webdriver-manager-tailwindcss-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20488f7b96c14a7d14e0afc2ebb7f50a71666b0fa8b83d4f4b59ade06ed380fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140567 Malicious code in ceres-helmet-wezen-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cf466b18144d7948c134657b443b0a30c97b236683cb3ce5a18e23c2157c857 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140102 Malicious code in bootstrap-event-figures-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd440be5c2398a1ffe5fc7cb8bf04029cde060eb05763d8cad3f255deb78d732 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eris-miranda-csv-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08de3a8d81298ce8a508487d4353acf11b5e3fed26f67cac0a62919a1ba1851b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in halley-sync-colors-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a315129aea4bbc0df37718edecba7ea88cb3534b2df5ef52e798db334c6e3d04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fornax-loopback-npm-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b975a5ba0f0c6a4838576be74c94b28470bbf753a132f2a366c7773f2f67dc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140756 Malicious code in child-process-socketio-envconfig-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ebedcdc5ce974e9a83ff75820bcf48fe3fb997ee0bbc3c3096bcffbe5d10246 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in castor-reveal-md-react-bootstrap-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 279aa0e60f46495584e2044891a57e17d52a3fa040efc26a9c9574b20e260df5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149168 Malicious code in virgo-rehype-hermes-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b4c4bf9e0a867f395c0915acb3f132a13d802a1a26646349a3019eb4bfc537d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in foundation-backend-enif-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eea8983cfb7321a64c393a13df8df02c24be015cd55a99392d0529a56570e9d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in achernar-geckodriver-element-ui-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6f1253be5da971749704f5a0ca7b1672c8b75855e91d121c249fea900dfd15d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jsonp-vuetify-enif-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a0995bf6278c3b0cc799d6ef007365cf569b167a6083a421c0225b1dd6d0f8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pm2-hyperion-mysql-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88bd384abe5841ac7d284915b8d92b119b617ca2c97fed9c70af39192ed3887d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pm2-registry-kronos-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8ac5152983cc7e617269f27275241f71ade3badb45b7a5d4add7542f23cc7db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prettier-cli-css-minimizer-webpack-plugin-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f372a656fe0832a9443ce6a331a1826c8e5a2415fb49cf2868ea557c790b248b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gatsby-commitizen-centauri-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d23dc81767771f097119dec1907f0870dd56482d849c952663140da2b6f431dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prettier-plugin-markdown-sqlite-jest-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6de74ad8ee89a869c6221a33e7a592b0e66d6a662038277005fee848e10a0530 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polaris-grunt-nightwatch-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e905ca459a3f52802a6a52f4225effde979ef4a34429d2f47835fde85119d898 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prettier-plugin-markdown-winston-phenomic-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b4281d2293ceb3511efadd83180a51398ec38deb67e510f1ee4384129802f38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...