MAL-2025-139759 Malicious code in auth0-style-loader-polaris-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 017babb992767ee4824521e3abb64ee04ac53ee11d2883e77db12c39112dbb76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140251 Malicious code in bunyan-ora-typeorm-terser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49c7e55f71c3f14590cd8d94dc6c2294d09aa2517827df0a5dd864ce315d3cfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148235 Malicious code in sqlite-perseus-nebula-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18f6b44d9bdca31d5c462ad3cc3176ab255171b26341dc579e4629fa32c15096 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141431 Malicious code in cz-conventional-changelog-readable-version-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06a797a57b56b21a8ef909b481e62c50dece4cc4fe20ee094f59595472ad6ff6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140816 Malicious code in cli-vuepress-html-webpack-plugin-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c2432237f1723a37335764ec0a92fa5b96656aaf81ad501680076a8e1b4d646 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145595 Malicious code in nodemon-sedna-elektra-optimize-css-assets-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5945109b83f9ae125adf57990fa9ae515fb677c2bef5f12a56a6c7192ac91329 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146958 Malicious code in quasar-rate-limiter-changelog-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7fc9114b2a03607eceb91b226e779174e19177fa53be111b25fcc6cce8a74c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142035 Malicious code in enceladus-registry-middleware-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 601890e34a925807750aede5392b74fe8ff57a1b3b1d8bb57429268b8cbb429b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141989 Malicious code in eleventy-aether-package-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b35202d4e67fc27cc38dae4b8a48e505bae3cefd543cacc2a79d667c7cf47751 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144266 Malicious code in leda-docusaurus-dactyl-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfe9540d294d05068d083d49e995048c8dea4981c2552bcbeaf0d0147055b72b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141353 Malicious code in csv-pulsar-epimetheus-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34e11fb22440796e42a2a2d5782333373007b60a5795efe3498f6856ceaeaffa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144945 Malicious code in middleware-antares-bulma-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f4a195dc12e34bcddfd2b5e36d9a5c748024e53f940af3a3b5ec6ee8f472a55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142743 Malicious code in fusion-perseus-global-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca61a064c244c729ce59da09fd651affa69b1ca3d9dbdbf0f32887f5dadf1700 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148314 Malicious code in stream-dynamo-sass-loader-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c12dd3905e769ddc09355e980f8010691eb0e3d6ca5c551d5e33d582b98791d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143448 Malicious code in hydra-ora-npm-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce129e7fe90819908be64c2e70320963d6105ab17830b4acdbfc7c9331e54f2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142395 Malicious code in express-winston-yakutsk-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe636acbc97a299d869084bd0513317bc3bda86908730e32ac2ac31c50b13256 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149556 Malicious code in wolf-perseus-release-it-mongodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c93298b7cbf597b2cd7f3eedeef73414dbd7aa907fda69fd74d6492e990167f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142330 Malicious code in event-transform-electron-builder-draco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ee0ce5601f068a49bf40ce75803158592a2ac0584f58eab0e797b2ca8f76259 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149124 Malicious code in venus-subscription-pino-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b084d77d240ddb72fc2468a96b8d733738ecf2c519fff700a0354752768c0774 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145483 Malicious code in nightwatch-quantum-eleventy-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63b4e934385a03280aa2645464ad16fc7f357141f2855f0aa71d9066fa1d3618 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...