MAL-2025-141118 Malicious code in cors-chakra-ui-norma-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a6583e3fb97f1c660d5acd6273f78cff0fa61a0737fe5b0b5233e8b582d2659 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139376 Malicious code in andromeda-dagda-mui-xenon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57e6d7338006e8c1b1737fa69cdb4322505b94d628c9feb9845f90dcbeadef22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144618 Malicious code in lyra-wasat-hugo-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7ddb3ca9f6d50990ff21debb589c168ca2cffd48db3c29db36a304a8f329a40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146809 Malicious code in publish-publish-miranda-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aedb5c0f39ffdbfbdd6894a3a815e5b6a42727a0a768cf1d851ccdf242dc328e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144883 Malicious code in metalsmith-mui-less-loader-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10bb6388df2ae8ef88d5d36c437f612beb5e1f332ee1c03c546e1444a4f4f673 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141252 Malicious code in cross-env-despina-uglify-js-terser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1edf31c854a1b8738e5cf7f2411e20fd1a6ef824b769d3447ca29f3499f0e7bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146760 Malicious code in public-kastra-odin-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c1ea1c041c1cc3c6f30b1c651a7cceface3a61fba53a9e639fdd1c11ed1ec79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141390 Malicious code in cypress-alphard-proxima-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbb90a00a2e076e20237feffd9b33004ffc27b506f0d8a93d9100e5823fd1745 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139685 Malicious code in auriga-norma-test-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da79d86b866f3cc16959cbb6ce5270de1ace8196be287862f9fc39b06e0900dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142363 Malicious code in exec-winston-loop-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43316f5983d8aca28f6e31863054b8c78639303e35a1e92460a364c3a9d917ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuxtjs-prompts-venus-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 099ff1eaceb6ff93a26f3e4896f3492526122cbb96d49d532a67135b00209a66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142074 Malicious code in envconfig-halley-despina-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48934d339f8bef386426802ada777ff1e8a39e39111d761252b18c165fc55ccc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149878 Malicious code in zephyr-airbnb-procyon-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69b9ef6c0754649729eb5f9e2c42335591b0d749077825d24757eea9c21d2a61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146853 Malicious code in puppeteer-ganymede-hermes-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8e3398eec782d88542539c931720b191039bca6ee9204f7b0908fff31927037 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144218 Malicious code in kronos-gridsome-eslint-plugin-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d49831c60df02a4ec563dc66764d272a886cb44223adb4887a15af6b9ab643b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139721 Malicious code in auth-equinox-orbit-charon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a9475c3f922c44685e8fc041b480d631659d14f00c8f412a69637d2e0f5b0ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149200 Malicious code in vuepress-rollup-plugin-bootes-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 459bba9d11d9ac0d287ffc425c6ef388ffc1edc035bb30a831d617d5e190d4ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145216 Malicious code in mutation-altair-readable-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0640e5d7dbd534dd75362e631e2035cba7e43d9d2a66b753602e728af6ba27dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144950 Malicious code in middleware-despina-geckodriver-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b51bcf9b0a4564225e487b23317e9819ec1bd08d84ecbcd8de05f87a50369de8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141214 Malicious code in cosmos-postcss-loader-iota-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 761b189a4162df26d5290b5c7b6135a292988ba9144bdf0b3d530d206cab2cd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...