MAL-2025-147054 Malicious code in react-bootstrap-docusaurus-release-it-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0995fe21961efede9dd77ca581d5867b77e1a82321014f9343117b49c54685e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140944 Malicious code in commitizen-style-loader-ursa-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55d2ebc38705a078126552608b320280b5a60874c5f00b2dc23be6eef2c6a79e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143765 Malicious code in izar-thuban-lacerta-remark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c26066cdf7ca11aec8c88de6d30f536721e786cffa0b9f924a5dffbff5bfc56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147409 Malicious code in reveal-md-fork-rehype-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7bd2af128bab75e78effa18885ce78d40f2fe2aac43ad15b786c5fcb3399f83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139724 Malicious code in auth-middleware-phoebe-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e3e51978571ca4dfff349d756ffbe01b1a5025c948ec27206dac4551be7b695 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149669 Malicious code in xenon-version-lyra-nuxtjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39b102d936e27cae1f4a4a0d270ab5454a9315e36ace9caea6d9a6ee29acd289 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148753 Malicious code in tool-semantic-ui-loop-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5db7115ede80e9b0da93eea8563dc13d2bfba4b5706c69f71dfffd4c7e4703e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142727 Malicious code in fusion-callisto-parcel-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78094ec84b44c653fb466d59da99ced3eb3102b8ca8e13b0bef3f006f795826d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146697 Malicious code in protractor-rocket-terser-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6784835499ff275075838e347dcf3d09c0983db7b6cf15dada34f13e5f0e66a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141517 Malicious code in delphinus-gatsby-halley-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79c6d86c6b07f4cea3e26a70cb2eda3a744d0607bf323cd9437ffb3745a10a98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149823 Malicious code in yildun-spectron-webdriver-writable-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7963a976ecbe4cb6752aecaca73085e662641b3889b0def97a696494d7a1f28d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146272 Malicious code in playwright-achernar-fork-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92b8f8c34cd0569e980d0406ca537a6f31f0966e068ac568d2797b35fc517fbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141382 Malicious code in cygnus-style-loader-sqlite-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb98b6dfeefb2c16b296f59869bec9e0ec675ff89d8058fa5216b656f1b1331b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139351 Malicious code in altair-farout-antd-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a37cdfa05098dae12112f2bcd0b9d39c4b74b008d19cdec88420ca6f0823a1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142242 Malicious code in eslint-plugin-spectron-csv-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4186d0899623ecf21329b54ac8cfb81a5c3d55ce143400e9dbe0088a6262051d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141084 Malicious code in convict-promise-transform-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a773ff24f12fd9deed0f9b0e82fb801841739a9bc9a21b854986738c1090633 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144222 Malicious code in kronos-library-jasmine-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e649f5132815d972e00153417bb9efce79e604707867914d1eb4c868e30046da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144093 Malicious code in karma-aether-betelgeuse-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b22bbc49c685a44aec9fe6c306cb5baa37e082c4a9492ccaf2e80f03045c3420 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141243 Malicious code in cressida-sequelize-wolf-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5a46a9c2846a091e28a3a4dc8c51bc71bdde5de64a5745a8b0b0b66988ee9a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147644 Malicious code in sails-dependencies-metalsmith-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae30710522f13143fd61006a6137f7c9f1b8a00a51f277fb5f02534ce8037f01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...