MAL-2025-149455 Malicious code in wezen-framework-dotenv-safe-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87602dc7c2a6edae48bfb5c94901e8a70ec0be68891fd9a43a379fc6da8d7a2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147261 Malicious code in repository-cross-env-centaurus-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c51033a06966973451708c96c2f82eabfc550072d5532a9fae73d019b7e69caa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145862 Malicious code in optimize-css-assets-webpack-plugin-hyperion-dotenv-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43658c46bebb5ee585b5255be57e828215cec8078d22d2bbf56c9313f7277ab1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142023 Malicious code in enceladus-betelgeuse-nodejs-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a214e3efeb5ab890583b8fbdd9950fe8de1f2f78df13e65aaaa8892a71e73dc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145595 Malicious code in nodemon-sedna-elektra-optimize-css-assets-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5945109b83f9ae125adf57990fa9ae515fb677c2bef5f12a56a6c7192ac91329 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141086 Malicious code in convict-query-nodejs-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 947879ab9208e82054fd505807da031763a35a0ff420bdf7e46e98c33eec225d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146495 Malicious code in prettier-plugin-markdown-sedna-sagitta-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 458b40a7e21ed9c73ea33d3e2828ad4a708c2484f3fe0ba8a02d4a89de882286 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142743 Malicious code in fusion-perseus-global-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca61a064c244c729ce59da09fd651affa69b1ca3d9dbdbf0f32887f5dadf1700 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143448 Malicious code in hydra-ora-npm-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce129e7fe90819908be64c2e70320963d6105ab17830b4acdbfc7c9331e54f2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146914 Malicious code in quantum-regulus-xerxes-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c14a1f44c2f7c4f15e67c01fa676fe8a3e69cddd184659b61b87deb61de9a5a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147056 Malicious code in react-bootstrap-element-ui-gatsby-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4175fec53eb9ea162464df2522513155eda1ce993052c64a2b283b5cdabf86a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143493 Malicious code in hyperion-odin-element-ui-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f451588e73aee3cd758c7d1ac11ac037df831790d6ab5fa69e9911cb4111b0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141353 Malicious code in csv-pulsar-epimetheus-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34e11fb22440796e42a2a2d5782333373007b60a5795efe3498f6856ceaeaffa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149124 Malicious code in venus-subscription-pino-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b084d77d240ddb72fc2468a96b8d733738ecf2c519fff700a0354752768c0774 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148314 Malicious code in stream-dynamo-sass-loader-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c12dd3905e769ddc09355e980f8010691eb0e3d6ca5c551d5e33d582b98791d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140562 Malicious code in ceres-dione-materialize-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4299ee1b5a3b953487ab291e6ea99362c4b420b372a5776540747c429c4155eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140251 Malicious code in bunyan-ora-typeorm-terser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49c7e55f71c3f14590cd8d94dc6c2294d09aa2517827df0a5dd864ce315d3cfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in regulus-local-eslint-config-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05b8a0e9039e0451fe1b3b0c8b6f33d25e4987340fefcd91e843027f99b848fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139697 Malicious code in aurora-chai-csrf-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6e4dc3022282cffa8ced96920d3d0caeb5bb7cc58760e52b23ba6bf5e3742c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145184 Malicious code in morgan-nightwatch-webpack-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53cf587f269ecc7f2f66a9d49757f109a9d5f079dc24163522e53da40953e73b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...