MAL-2025-149824 Malicious code in yildun-terser-webpack-plugin-configstore-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8105757ab51945dabd778023f1559d229f664324c21b37363182591be637986 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148177 Malicious code in spica-radiant-await-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d9f9a3f881cb11fe0d8855419bcd6658ea71a4049938253b6e9edb76c72d7bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144851 Malicious code in mensa-foundation-apex-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ee5be0fc327e8e38982be98ae04183db050f3f4b08c7cc0af9727c9c2239019 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146522 Malicious code in prettier-stylelint-tool-ora-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05fb65252970369317f9467c1de0ef334172b589598e4e1f5bd3530e0a192b71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149054 Malicious code in ursa-dotenv-safe-nconf-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd6467b9bf9305267e3f19b3326675b76c09277824481b4e1fca8df8bed48f11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145466 Malicious code in nightwatch-figures-postcss-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5684f253471f3ad92faf82be19ae9e11bcc466730f601e3572e2e65b93347e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143503 Malicious code in hyperion-yakutsk-pino-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b161e20714d583c8b9768d31924734fd3af412e4d3e52a341f66e4d57a67528 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pipe-jabbah-prettier-stylelint-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15c51329d43e43655bbdb59a03c24e3aa44dff574c959f7d88755860d0c77f3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149618 Malicious code in xanthus-bellatrix-less-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd54695cc3236f3efc65f64d59a944e42dff0e5f3b0e47c60fbd6525c622b52f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141864 Malicious code in elara-barnard-koa-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0cbbdf075d7109a488c5c9b24914639e5f324c8f17792869971802a71e91a0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149594 Malicious code in xanadu-electron-uninstall-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0597b15a125f89f0a8bfef840956f33b02adcc1c53efbe7055a7739d69bb71f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141548 Malicious code in deneb-markdownlint-venus-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9072afaa134e1e2a0c8fd4b490cba7e97b3f7cd3d0a7707a1d0e64a8aca1f89e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141673 Malicious code in docusaurus-process-jovian-algol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab06500252ced0b44546abca0d6a540fef34b17a5c86c56d86b163c9f31b0527 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141047 Malicious code in configstore-cygnus-envconfig-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d6200864a3393beb6b64d622c2e8175095b42f4b0a818f66e6df20d44317435 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141293 Malicious code in csrf-postcss-dependencies-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e323392ca38cfedc4da56f983f855457eb4db40ebfc12a16fcb2918fafdef571 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140922 Malicious code in command-sirius-request-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8ecab9e178161b631a734be3681ba71114cffbf50a4874a3e80a01eb246d304 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141399 Malicious code in cypress-hexo-publish-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49327fceabc44149bd1524f1da1aed84393c4338514085628a89baa28afdb1e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149340 Malicious code in webdriver-mocha-airbnb-dagda-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a53bcc020075238d1989eb6c590d78b229b53dc5d97c211b7ce2577909b8c6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139721 Malicious code in auth-equinox-orbit-charon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a9475c3f922c44685e8fc041b480d631659d14f00c8f412a69637d2e0f5b0ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143242 Malicious code in helios-vuetify-deneb-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9018411a1ed02158055570dc48502874efbe84da714416b032412d42a6186f43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...