MAL-2025-143408 Malicious code in hugo-uninstall-event-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b5228b4ad37717672072e268187958051d998619773c29d0b8508b3c80d76b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149467 Malicious code in wezen-rehype-redis-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14375635da7a696cea600e454c822828dee6718526529d62006d988686dcc595 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140988 Malicious code in commitlint-hyperion-morgan-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa8b017e87cab1331f2b8c026fb02605c014ba3e727b00836a191223d6e44a80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144436 Malicious code in lint-duplex-bellatrix-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4663042e0b4372b3db047434410679341e3cff303841a5caf9c0c5924b813170 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149877 Malicious code in zenobia-warp-markdownlint-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b18dfe08f8107037841d2caef366d4f4b18d08ebefee595d3ffcf27fdd1a5c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143183 Malicious code in hapi-hyperion-corvus-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18f90757f777313f495bbab629a08d287877e9996063f135538f6c4a9ca5cf61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145770 Malicious code in octans-halley-phenomic-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a10aa7281e2cd760e3e8919d3fa577ef77554cf9e2f9b5cdd818f2c38c3a0659 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148455 Malicious code in tailwindcss-slidev-antd-elara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0be2c69fad5b110b2dbeeea015fbe299ab9aa61c3feaa29d68a296c5fbf22be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141615 Malicious code in development-changelog-publish-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ba5a3360f88d40dbad8ecd7069fffd546d8daa1e0992e70276075c9638951b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142679 Malicious code in framework-dynamo-react-bootstrap-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de049a6db6a95c67a2bc0734868704264651f3b278204b15e772e2e7561182d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141274 Malicious code in cross-env-tailwindcss-got-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfebaf96f22fd8860a88ac0184b73b01ba60142ae6ef17a441f56736de49ec77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146249 Malicious code in pino-rate-limiter-nconf-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2007d321e467534524557879fce285a8b90bc93b51de29e08cc7ab4b7383440d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141687 Malicious code in dorado-halley-comet-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f61971e696f00e0b15ae7dbd87ae429aed772439dfcd64995928df915731a459 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147920 Malicious code in shelljs-markdown-webdriver-mocha-prettier-stylelint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 871e92cdb1fd0e8833547b7e716488eeca5c8566ac98b62af09da9a487cc676a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148649 Malicious code in thuban-dotenv-safe-rigel-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ccc363bda7653032d1ec59093033ea188b057325b09bef82a64b31336370d9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141859 Malicious code in eclipse-publish-algol-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e94ad0c7f0873eed2414d8735a62b4acaafa6114b5375c2436c1ce6cf3fabf0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145154 Malicious code in mongoose-html-webpack-plugin-leda-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8084099cef506937c5e9d3511caaca023bfc949630af4a21c0c58b1b485586b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148585 Malicious code in test-umbriel-morgan-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac7e38a95ac3fab8b1f25744bf8b720b6a5394219e6eba2b3e7a7456205abd0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143078 Malicious code in grunt-vega-deneb-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaf5f5efeb36f11ed5f3666ef5624a5e0ff840fe8020a24130d5693875258221 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149471 Malicious code in wezen-uglify-js-stop-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0cb747f817d3854691f2f4e78d85638306150ffa98f5d294bc280cfc35f51d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...