MAL-2025-141958 Malicious code in element-ui-antares-browserify-helmet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b28d60f9afefbbf9290d01ff6e7f8a6fcbd00a269b5f91c6f21187516bfa63a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148289 Malicious code in stop-chakra-ui-html-webpack-plugin-uninstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24a04beb1d94e9aa6142f6535b0c0dcc3320aaeb6a53e45353f3211d6f345730 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spawn-kastra-got-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41b681ac37012ca91d6377363d6e5a8296b01d4e42c7f49d917d4e368a0be7af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141484 Malicious code in dagda-resolvers-express-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02a92d36a069c5febb5db84af1665e4412342f0c0fd6ffc310f5b08d0b7e1753 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149316 Malicious code in webdriver-manager-dynamo-gridsome-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0bf1105a42fc22026cb6050057e501570d3e9fda22533d74d0daca090f4258f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139963 Malicious code in bellatrix-yonder-umbra-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82c027042fd92c3a30c321fafd4afb495182a3bf29c1f24514ba2afb57de9e31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144987 Malicious code in mini-css-extract-plugin-pino-changelog-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3bc3b096ea1cce54a22723ec725ac1abb7d37238f0f9e96fb9d1bb568c06d3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143050 Malicious code in gridsome-release-it-cluster-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc8a82147ad830cbc9da53e0a7feb5a348448c61a836c3fcd2825a9c42a3856a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145583 Malicious code in nodemon-middleware-non-blocking-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0911c18dba18f41ddc05e9ca6f4eb53d1a1290db69de8d120a48d8b7b16b0d46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148883 Malicious code in uglify-js-spectron-colors-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9ca0d32d9252e9391a2a4897d756ec63df61d8558401790307a3a375ad8f331 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144615 Malicious code in lyra-schema-carina-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40013831782978aca7fbd4702500904424446812b22f6f8ecebe2c19bf08dbcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139935 Malicious code in bellatrix-element-ui-native-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1d1043cedb1fdedef8a8f3bc8f478c9b74d28d60356cae5f3555fb9b7ae998c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146611 Malicious code in procyon-procyon-quito-norma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83f27e5c9bd6af5be773fcd7ba16124776345d70b19f6f817a3a98097bd1d0d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149311 Malicious code in webdriver-manager-cassini-husky-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41067e64b0e1a53419010feb07b80e405e5b8767a4ca1044d7733e3a7119495a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145589 Malicious code in nodemon-odin-yildun-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f93fc9caed39a985ca16d0832f3a06d17ba8a9921edbc0485d93b77f665db149 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142069 Malicious code in envconfig-auth-redis-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85555441a0c2d79b1d1b1969076ac3264555cefa255a2a16d975c6127b68c535 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149807 Malicious code in yildun-build-install-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb4e80886008f6f371f70d58da7bf2ee35af9af984f78da85b9eeaf689236d7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143889 Malicious code in javascript-readable-fetch-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3827cbbd47b302e1ef59e4c94ec650165f357e5bbd37b488b09940b80b763a5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149576 Malicious code in writable-neptune-norma-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f525a38c1f7ae8c65e5357112ddb68d3345bc89693d22c219fab3879adf2349 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in module-terser-rimraf-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99d5e223b4b4c03261bfd63d53ff1a3b4ca1f1283ff4b81775390e14a9925f07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...