MAL-2025-147459 Malicious code in rimraf-sync-koa-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 532009f657580cbf19bdbec5522f5677ade66238901cab4f4b3a95a524b4dd7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145184 Malicious code in morgan-nightwatch-webpack-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53cf587f269ecc7f2f66a9d49757f109a9d5f079dc24163522e53da40953e73b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140849 Malicious code in colors-element-ui-dagda-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5809245058bb39895586137d945c96906e0075bc1f91d6b1fe5d8eb799fc0899 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142993 Malicious code in got-ursa-css-minimizer-webpack-plugin-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5efd654fe96c6a67d87c933eca18ad2b34cf456480a67150d1a51d0b71d116c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in regulus-local-eslint-config-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05b8a0e9039e0451fe1b3b0c8b6f33d25e4987340fefcd91e843027f99b848fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141257 Malicious code in cross-env-hydra-vega-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e75583628fc05638cf1ada99aca1c3b242199b18927ffd6aaa09110231c3784 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147056 Malicious code in react-bootstrap-element-ui-gatsby-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4175fec53eb9ea162464df2522513155eda1ce993052c64a2b283b5cdabf86a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139807 Malicious code in await-request-docusaurus-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ede9ef0a4df2943e87caf38702373e341c5980d77060c18526a2c85fe8f11c83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140004 Malicious code in betelgeuse-scorpius-postcss-loader-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3427e7143da6bb276367048b0c5b5503a017feeaf6621d126c4520ebf2085c76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145483 Malicious code in nightwatch-quantum-eleventy-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63b4e934385a03280aa2645464ad16fc7f357141f2855f0aa71d9066fa1d3618 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143241 Malicious code in helios-uglify-js-nextjs-kaus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c6948ab4c43a4459026e7fab984c2823c9512f7a3204cc4437e5d1a651020ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149345 Malicious code in webdriver-mocha-css-minimizer-webpack-plugin-ursa-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01dbddf36a8477e622bf1732299f16d35bb423944f8678a305a18aa199ba0ccb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140768 Malicious code in chromedriver-elektra-halley-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14ec5f701b3069721f2171df71e6cb4b2a89f1cf132bfcb9097a1220f44b1f6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140473 Malicious code in cassini-optimize-css-assets-webpack-plugin-callback-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a4d26d4873796782551905789c7fd81ed92473600d7d9e682e8a4f349c24e1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139377 Malicious code in andromeda-enceladus-prettier-stylelint-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63b4ef2f98ca49c6d905913047175855f99e997a9f886a2b141293ef331770f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148235 Malicious code in sqlite-perseus-nebula-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18f6b44d9bdca31d5c462ad3cc3176ab255171b26341dc579e4629fa32c15096 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145693 Malicious code in nuxtjs-achernar-sadr-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca69bed6f1ac5109bb281b861bd2e93d1e31ed3f606518daff1af52293e8b111 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144653 Malicious code in magellan-mongodb-fornax-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a70598d3f2d4714da0773553f94b820f5a8c58a903b861bd575151ebcd7b0807 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145862 Malicious code in optimize-css-assets-webpack-plugin-hyperion-dotenv-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43658c46bebb5ee585b5255be57e828215cec8078d22d2bbf56c9313f7277ab1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149899 Malicious code in zephyr-yildun-docusaurus-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 400b1598db4b5a863e70c4e4eb420101eaa2ffc4863cbfa4bc809a637b75f3e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...