MAL-2025-142655 Malicious code in fornax-terser-webpack-plugin-sedna-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0729f1bc571228300f4c65eba144a693278b614b0f8f55aea444d0b32b443aaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144089 Malicious code in jwt-tethys-eleventy-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 566ab5195a913e703f2510e429b5fde782181dae4b9be1302041922eef69bd85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149537 Malicious code in winston-zephyr-nuxtjs-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 912f6a1d7d2e2169fb6ca024f4ffec9fecad6da1c2231d994c692d1a85486a8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141774 Malicious code in dotenv-safe-quito-sagitta-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8bd17f282b80e518fd36af5bd8237ddb4c4be6a734607ebdcbbb5d20ec0adee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143961 Malicious code in jovian-version-wolf-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4f69a9086862655d20f6380f2c35b0ee7d3c426cdfdbd882de75490dd08a20d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139700 Malicious code in aurora-juno-grunt-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b678e6f76e896515da8263350bb2c055dc7d0e32726f5a2066eac0f4cc0124d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142175 Malicious code in eris-hermes-nextjs-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d78ef202fede5425a153b911768f8232a8ba154b1acff3998b72b75a604f20c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149467 Malicious code in wezen-rehype-redis-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14375635da7a696cea600e454c822828dee6718526529d62006d988686dcc595 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147162 Malicious code in rehype-auriga-google-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 673cbf0729106f6a375f1483305e9e1799186f99e4954e4f043d47daf81b8445 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143078 Malicious code in grunt-vega-deneb-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaf5f5efeb36f11ed5f3666ef5624a5e0ff840fe8020a24130d5693875258221 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142017 Malicious code in eleventy-zephyr-radiant-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b4a463214a6d29227a8b2bb4dac63d4fca7441f0fbeaa2be1c26ea58499fc85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147519 Malicious code in rollup-plugin-sagitta-css-minimizer-webpack-plugin-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53c8f5b34fb3f7d597c860a1710f27f46ff907e13fbe49cd8c36c11f156f9d61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146469 Malicious code in prettier-ini-babel-mdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36b566f92ee775fdadbe70403772b8454710e9712622c79844d941ad37fd3875 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146930 Malicious code in quark-nodemon-geckodriver-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac4884a9d6ee83a9f636acd3035fea7547cffc09b81ff94b654ea8905ae27113 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141274 Malicious code in cross-env-tailwindcss-got-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfebaf96f22fd8860a88ac0184b73b01ba60142ae6ef17a441f56736de49ec77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141644 Malicious code in dione-grus-phoenix-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 494ecce21d08eac72158feea6c2b6dc15715c53cd8b661712a46038058fd3872 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149641 Malicious code in xenon-ariel-foundation-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 154d686ffc4faf29ecd3c0b4334cde0d87fc570fce3cba8794a8fc683629e863 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148540 Malicious code in terser-triton-element-ui-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d790e4c59825ea9cbfdb156aac422fb536844ddb3ac72f22fa69562dec2a150 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146828 Malicious code in pulsar-duplex-chakra-ui-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 475125da4e180577d2f6485fc6337dd3a6e8b9207f29411adea8142ac112a81c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mocha-karma-canopus-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66ad4880670e7c06a9008b696f011e6661a4169c72a764fd4838909894448233 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...