MAL-2025-141109 Malicious code in cordelia-shelljs-gulp-optimize-css-assets-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7027c32eb0a3ba723ebe11ca4df1274d19f003ef78d0984d760230a9baaef860 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142780 Malicious code in gacrux-publish-tailwindcss-bootes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85d37f5a3c4214caccf7c82701f651d7efb773236d74e1fff5946573dbc65889 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140803 Malicious code in cli-magellan-farout-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b527d8b5b28588d0d184165346d2df487d983e0a39decd2a1b463d5211ca4e08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141563 Malicious code in dependencies-changelog-cosmiconfig-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a84d9ea7b954795a472da77c59e5779afe513ebabc579db3051c8ccb635e1150 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139685 Malicious code in auriga-norma-test-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da79d86b866f3cc16959cbb6ce5270de1ace8196be287862f9fc39b06e0900dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143922 Malicious code in jest-epimetheus-kinetic-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddab619c8b30e6580d6e76848db0f867c37c639ed8a74cb0e28c233e735ad4d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145159 Malicious code in mongoose-meissa-typeorm-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d207c50c16bf8ae27e0abaf49e3c40acadd72c0f080d7ac1c953c490af5088f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147159 Malicious code in regulus-transport-postcss-carina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bac55347ceb36577a07a4834c7dcd105c32d8cea87d44e81f91cec75910cdb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147749 Malicious code in scripts-transform-markdown-norma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c2c66e87dee53b643328c06416ae6cc2eacfa3b1e9e1d7a27a2ec7d0e7decb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145090 Malicious code in mocha-private-cassini-xo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dc82190d8b17d1f57a30e12ed75fde26ae8e9fb09897bcb4bc0cb303e68b5dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139583 Malicious code in ariel-corvus-event-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6634e6e973158deed32f962021eb150569df92258f47d2f426368fdc00e9b2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145653 Malicious code in nova-centaurus-telesto-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5bbc66b20d8d504c89d9ccde8e832f98bb379a688b9c04e2ed6dc9641f1d34d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145895 Malicious code in ora-request-io-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c9b22c5b28831c6ab3fe45a56178c6333278db25389c2d08125f9f6836adeca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143343 Malicious code in hexo-iota-release-it-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17f83a9d526b35e0af23d3d425be9a0ef87caa366f722a9b99e5f69b23f8b7cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141805 Malicious code in duplex-config-capella-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d02bc3281086614c8cd6b45aa58e9e18acba38bf7938917b5b04ec3f943b11f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145140 Malicious code in mongodb-server-yakutsk-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57dcaba764b7d0683fc08db311198f703cf88073de862611d3f71439e3a4ded1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147392 Malicious code in restart-proxima-apex-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00c4589dfc1f8737a6c828930b440b726da1d49dcad6a62b26fd2aa9106d3546 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148824 Malicious code in triton-public-duplex-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f422943fe3cef6b3cf3df7c0bed6e35e4aa3dd409f102bbb8f9a3cc30a16253 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141701 Malicious code in dotenv-avior-native-blitz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4165dc10ad42b1d39155548bc0cb91c1dddf403fc627a257b53939938306b60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144932 Malicious code in meteor-rollup-plugin-io-carina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c50a0b0f70775d4832f652c3f9822fc10a8ee35fe551b2db4b3589bb4703b459 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...