MAL-2025-145528 Malicious code in node-sass-bellatrix-commitizen-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea8300cf67a6d08ef996a5dd67ad197d2f9e90d878f87659c59f6da61608c421 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148658 Malicious code in thuban-oauth-graphql-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1bea268dfde784764d8a6760df49b436ccfb4a3c6881153cfd443747248420d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143038 Malicious code in gridsome-docusaurus-module-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aee67c97a3529471781f0204f2dfbe128842c724b789c58e825c918fae1e87e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149632 Malicious code in xanthus-nodemon-apollo-prettier-stylelint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e7030e1eda3b429416cdf845e5fdc4752ef50c03422f83a833cd7e1a12a8a94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142645 Malicious code in fornax-postcss-loader-umbra-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 383f3b0b1391bfd0c00a3d1e37ddbcccfb1df98f150dc0f63769832c19d0e281 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139721 Malicious code in auth-equinox-orbit-charon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a9475c3f922c44685e8fc041b480d631659d14f00c8f412a69637d2e0f5b0ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144674 Malicious code in magellan-webdriverio-shelljs-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbe19c56bd6f39887588286da4810ff134f86ff606f2b2f0b78472dfcdaacc39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149693 Malicious code in xenos-vuepress-socketio-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9af27987550325036154caf57f1fc9d78ada800fca1583cb0f744df1f9a6f2f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144218 Malicious code in kronos-gridsome-eslint-plugin-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d49831c60df02a4ec563dc66764d272a886cb44223adb4887a15af6b9ab643b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144237 Malicious code in lacerta-dotenv-parse-variables-charon-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 655f0990025331f26bea8ba9a4718b3206e5931ea8fefccd766e369c6312c564 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149810 Malicious code in yildun-config-electron-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac3075d940b4cb7305a807b21108734d5b68f8e26426628454d4345e25a3851c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139561 Malicious code in aquarius-webpack-ganymede-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f3c8839bc40bff2fc831eed2f2f16a2ede89e3ad0670e7e85bb2645c985847a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143213 Malicious code in heka-postgres-update-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11afb35799007a0e25cd3e23775b02f1bc4fbd2fa565e5913bfe2f55d4648555 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144590 Malicious code in lynx-csv-bunyan-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d80dac0922caa37c040c9a8061b3fcec592a3beafaef79f46568ce80e1d71e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148522 Malicious code in terser-ini-sadr-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 223fea25c7a829f0d18381828d10a6eb1ff9a51c1adb446e5f6fc74b31860fdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142231 Malicious code in eslint-plugin-element-ui-hyperion-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5038fe2a3c36f89c8648d1958ea6266b9e56a0ef60f2efb00d26435c3e79a2b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142741 Malicious code in fusion-nconf-venus-reveal-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88e5556fc093097aa6272507a5812f1ff17fd79e8a6ba105a158af368ca74876 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144600 Malicious code in lynx-superagent-neptune-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f96e51531e573a2c554dc865f68992d1f2b7b5668f83722fbb84f0dace0aca2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149033 Malicious code in upgrade-spawn-server-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a6ae84aa5b7fe85307aa839241cc7ad1bc03413134bad3133d229dd5cb63412 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144719 Malicious code in markdownlint-algol-chai-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11cac21b59d57f39403b3152a77369e8dc1a301daf2eac4c4931b9a68807b037 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...