MAL-2025-141005 Malicious code in concurrently-firebase-remark-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc2bd0fdd87661ce67e74c146f4b7b9cc662fd907f84c6906e86d075e198c677 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in centaurus-mongoose-antares-ora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e24a06760a140827738726718696e4b03089d7bb0d21fc4e206ac055c8040c9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144137 Malicious code in kaus-bellatrix-async-astro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4ef429d9f796ffdace8a3f703b2ae5197b3a9ee8fafd196f82b1f31c7c80adc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144127 Malicious code in kastra-pino-equinox-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eda6bdcbe3cbb6ef8ab1bfa09ae585d6cc0e53b722c68e483091d717214b52b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145004 Malicious code in mira-cache-cross-env-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 300f84b23994bc74cbce26b47d6fa618ed69bc1cd0ffc0ca0702cdd19eb02cec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144462 Malicious code in lint-staged-mutation-orbit-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3c9aeaa19579be18420287582995f1bdcc81002b80c09f383588846803e280a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142767 Malicious code in gacrux-google-build-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2e1026076b8776a5abf64629bc49bf72b89ae170bac59cbe6d152fe94085f49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139649 Malicious code in atlas-mini-css-extract-plugin-equinox-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 404eaf3881cfa0b5b7b50fc02a65725729afb42926f6345a7dedfe0f35627d70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149321 Malicious code in webdriver-manager-io-betelgeuse-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53b7ad259d79486b5eec821e49788722b5bff497f8471dc329e58af138fda0d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146558 Malicious code in process-mysql-cosmiconfig-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4955cb99431235505cbe59ed6497b1d38a001b5e13cc6d6dffea67900dd399d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147632 Malicious code in sagitta-yakutsk-celeste-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90591d766829f3a790ea4d9c1652e0505ea1c2f38420ac201bf0912f328d2cf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144174 Malicious code in kinetic-impulse-polaris-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dae9f06594bf0c0f9bf149fd6065ba7e289724e2ad9f2bc222b94bf5de59733d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139395 Malicious code in antares-castor-yonder-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d988bdba1d2463dac031e9b4361d5cf5f8e29905aa4c542b324e6cfe05c62bec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144707 Malicious code in markdown-pdf-rimraf-kronos-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66cc6121c1002f967fcfc5df8b09150cb98ec5b80aed5551c892f0da52ea61f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148029 Malicious code in soap-pavo-barnard-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c60fb41ebbaf22e751bb38346303fce0e6f2ea2eb0e75b6a3e91c73e8781911 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144696 Malicious code in markdown-pdf-mongoose-hapi-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb45e9bae1c86f4034644fea07fcdc86ce058c7fd78f7f663ac6c3012e4171da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147186 Malicious code in rehype-solis-nebula-rehype (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab67037ea358d27c563606ff22bbd2be9c33e69c299f6f661e4055e6f94dee4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145855 Malicious code in ophiuchus-zenobia-passport-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0eca8c97cb6ac0779080fceb9527f7442614f57c2e63e5ddc7208cc5d617a013 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146838 Malicious code in pulsar-orbit-capella-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62bdca590ad06adc6837f3786b26dd80e42dac494df369de6e0a72cf115db638 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148447 Malicious code in tailwindcss-miranda-aquarius-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77b2f9ddd15df74589ecc838ba8b684999addf1ad6470c0b239cb7e34e2ffbb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...