MAL-2025-140323 Malicious code in callback-webpack-halley-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70a248511661d42b7e8a90d6b53620f06f00b4b181ee0d2c135f7ace1fe1b691 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148355 Malicious code in subscription-europa-babel-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2ac9f5ef5bcf96887f2c16de07fb146a1ea8f5943c3aa74efeb025cdadd5a4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143713 Malicious code in iota-canopus-loopback-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4017d639d7ddeac9ee44aa2eeaa32adcdf3d9a98214a28fde276ae47c03edac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149056 Malicious code in ursa-express-buffer-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d80a167979bbebdf1747a6f8b1c3dd693c488a57b5fb438a0218ac2c54d051f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149487 Malicious code in winston-dactyl-figures-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26a6cdbfe14a015e68b53836ca42b5a956f3b9133e9f6f9fe21da036ae347c6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146117 Malicious code in perseus-spectron-dione-octans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e15fab69ae105e30fba7e3a24c1bc57c283d108f92197936c36532b038d9c71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149404 Malicious code in webpack-prettier-stylelint-indus-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d64921929eec39375b7dbf92fa014626fad9648c6b0c294de247a2fb6e2fc88c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147592 Malicious code in sagitta-dotenv-parse-variables-sedna-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e631ac7a9f4e7976e8b8d30eb13de54d25dc87fc9cd528ac93f946c47ca990a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142516 Malicious code in firebase-tailwindcss-pegasus-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c42e3fd037db8f4b91d3aaefec30fd2fbad79523ac2b95a4aaef0bf75c2eb56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145712 Malicious code in nuxtjs-redis-fork-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 441db8c593976479e09837ccb82e9319efd093f3a426157fb5b7f92c821c43c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146875 Malicious code in pyxis-docusaurus-quito-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e4fdcb0fa11f7d81e3e00157275ea670dd1aa4dcec97934fc67da2394e5246b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144292 Malicious code in leda-scorpius-fusion-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95c2368d5e556c53b4ae55edbda2692a0cbd772956bc8ffd3bdd54d97d120dc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144459 Malicious code in lint-staged-library-fork-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 599e178fbd7b06563cee8ffa42611bd250dbf206a67592c620ac211ef0d23d4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141170 Malicious code in corvus-wezen-airbnb-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6625e439e124c01a9f05e73f792b5c19bce9c32a4010cc52be079d4af8f503ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145789 Malicious code in odin-auth0-spica-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33e2a02b14f805250844e02207a8da2c9897a344b77ef90b326bf6fc029b0590 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142898 Malicious code in gemini-grunt-spectron-webdriver-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector becd2eb0f83b8c1e751ec487940539f95186eba20bfebf72fa8634b5c6935a7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143299 Malicious code in hermes-antd-local-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c86117e77ffd0d2762aba9be413ca8dd9a6ae20efcac1e83cd70d63b05b6ab7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148612 Malicious code in tethys-canopus-altair-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 720f562573581774561c4c0e0a5968eae5270291c8a7d4809e40a194989869cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141513 Malicious code in delphinus-browserify-playwright-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7488bf1c84cac1534c0f648411101f77dfe5e87d49fa0fd80d42b09b61442089 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145756 Malicious code in oberon-sass-loader-supervisor-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b7b1e210facbd36613bd9c96454dd87c2f4600da4d05b499d8cd657036675a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...