MAL-2025-143363 Malicious code in html-webpack-plugin-hercules-aldebaran-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fed239abd75124c4ab5323674a97933b59c4e293809eabac3b6a9e8f340b019 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144042 Malicious code in juno-unuk-indus-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cefc777df30f65493f2c63a279abb6952249875a9d4a6558de667af648f650c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriverio-bellatrix-capella-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8417ef4c5d84311dca2374da8d719b1f2a3b734c4af2cc3ca9fb35674dc060e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wasat-andromeda-phoebe-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06d09196c4b90b3a84cf7add48bfe8e3cb2279e49e087e3e677594151a90cf41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lacerta-middleware-procyon-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da1b28da3265a24a7bcce4680ed10ee0d5aa21f933a37897e5c22f5b5203a960 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cosmos-jsonp-sequelize-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e00a5abfabe04224fb65871927d49042ca24e04932ace2d1531b09a6386ee04e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139653 Malicious code in atlas-pyxis-prompts-development (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4410063892694cb79b5b19fe2c4ff02fc6d15dbf4fb3d1c26b36cb88f479fdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140218 Malicious code in bulma-middleware-procyon-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2da90094f5a03de39c5fd357369364e0b32f35ff16c2eb61f23441b9e23f3d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146780 Malicious code in publish-concurrently-gacrux-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2cfe0c3e58ae6358bb280c4b65e3b0a5ad1a578037814733f4f7581aa92c89c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144623 Malicious code in magellan-auth0-markdownlint-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4110e4c3e1416d8249708d1df17172ba965f24d7fbe642c942883e8c886adc2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145476 Malicious code in nightwatch-ophiuchus-html-webpack-plugin-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afd914900fc67827f00e07c2f5c5fcde3d709bb90a7146f51700c73d01e22125 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140083 Malicious code in bootes-magellan-yakutsk-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66d9eed43e2a4dae5f0ed3a05e412b53eb3228b4172ed85073a6b50778c948eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140994 Malicious code in commitlint-readable-standard-levels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee74897cb470305c5a181b7888799edaf5856fa3361abf88d8a8e2f0f78bbb80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in helmet-mui-eslint-plugin-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a3ecfc9ebd051b1684c5e2b349a06ee960d316c0caadbaed438ddd4fc9bd863 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146981 Malicious code in query-toml-mongodb-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac5ccaa2ebfe16419da2c790aab04492f0b9cc5ca3df72aeabe287589dfcf607 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139658 Malicious code in atlas-sirius-comet-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97fddec731b84136b26868a5785d71228d094a80260d9bc714df326b31567ead This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143925 Malicious code in jest-heka-wasat-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04249879ac576d79fc9e7765efb7d944f2ea8639c65cc9aad3dba332dcfc98a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147668 Malicious code in sass-loader-gatsby-chariklo-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2804dde5b9b11f556c7eab05fa8ad604437bd20aea188b9c0811d8bcea02e17f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141970 Malicious code in element-ui-html-webpack-plugin-impulse-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a5363694bac4371cfc54011da12618a13ca07cb0b648c0243aacb32b1f569d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143645 Malicious code in inquirer-despina-arcturus-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 625a76d2fe405521045ff04e3a23711f2a1d079e585b4c732d16f3b5da957c30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...