MAL-2025-142022 Malicious code in enceladus-auth0-leda-sadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44ff5904ea8b5f8c969aa7052d1caef7be492c7bb6abe7cb68d1251dddb5d6e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144110 Malicious code in karma-heka-shelljs-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a1321402d373619ab428b9424583b9f795bb5713d9ceb5a919bcf553760974a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144756 Malicious code in materialize-spinner-superagent-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c569a14bb5035377c221313c418b1c79724b1e26641bc2a9027efc4adbde6eec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146974 Malicious code in query-nconf-jekyll-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7d0fc63dc21894114714a30fe30cff98bf7a4269faab536cc5cfd3dc729ee5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139923 Malicious code in bellatrix-antares-halley-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7459668e9fdfe7e25259ab0a5378deeef5aab39f018a73af01ee396aa5f1f18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142190 Malicious code in eslint-config-apollo-uglify-js-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a4aba2baee216127b0c025e606eb26aeea734c1225a518563943331c359874f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141024 Malicious code in config-ganymede-hugo-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 972c4937b0a1a11715489b02260c4d19fd928a94e7a408ded4575366da6e0fb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148176 Malicious code in spica-quantum-await-phenomic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c579da24df70ffc6fbf42475ea6f09c835ac823c2090fce27a08065d81176a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145608 Malicious code in non-blocking-dotenv-safe-got-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97ec042cfe2b369dc9c550415ab4881c8b222e5b9e1b1ffd6d863083eed4048b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141338 Malicious code in css-minimizer-webpack-plugin-yaml-sails-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f36f379c02a4aeb332557421581ca50f533617fe1d1ca4205afd44dba60103e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149138 Malicious code in version-janus-hyperion-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3427704e8c1914d68ba387b56c941a250f60c48b69b5a5441fb65e0f26bbee07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142234 Malicious code in eslint-plugin-nightwatch-javascript-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b333ff43ee1f9be398cf888d133ef6f16c4abeb587460d88c4ae7d5a8173469d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140193 Malicious code in build-terser-chariklo-jsonp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed23b79eed8301d5dd64081b506129fa0dd8086dedc7df9b4ba9d963e3bae94b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nextjs-phoebe-commitizen-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00c7087b7b287470476889ddc426136442abdab2d013c904a1f9e9d558f3cbdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in winston-nestjs-style-loader-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ead96a3c959e7edf3cd9bbe01b3683cdfc8844591b5aaf62c39fc03d8343a08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reveal-md-hyperion-websockets-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47d8c2a87fac657e462b3cf084ceab4d755bb219d31b4880b1d4e1b6ba1a7e25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tethys-uglify-js-optimize-css-assets-webpack-plugin-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd8cc6fd533950ef5b378f16b40b3c8fb9577c5a2423c4c92ab9c4bc23264c6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in development-cressida-sequelize-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d60ba7cda25cda3a3bfc8e15b4f112403cc1c5df0679ff03785c3356c1e4229 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mini-css-extract-plugin-update-cassini-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42bb678b1ed3006cc02805d7c02037af3629895bb1fe8d7676c6660427ff21e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buffer-config-miranda-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b2428e49d1c1fa813040f32afcbdb8c8455d25a0b20ba9ebfbd4c1c5e900c3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...