MAL-2025-141753 Malicious code in dotenv-safe-global-jsonp-centaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f253194bc152f223c5f587a9c7fd65460595c70d27749389763c4afbb0de8ed2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148875 Malicious code in uglify-js-nestjs-fornax-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f836626a36dad3ac3a3576de198188f321dcd3c9875be1920bea36dab436d7ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144613 Malicious code in lyra-leda-css-loader-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6b65512863f456afde79316705ac47d3730e71049e0ea42f9e6941aadc0dcea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143268 Malicious code in helmet-zenobia-jest-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8318772a9d81784738fd36d28c00cf1665ab566d585377a4d5f4987dadde5f4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143503 Malicious code in hyperion-yakutsk-pino-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b161e20714d583c8b9768d31924734fd3af412e4d3e52a341f66e4d57a67528 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149686 Malicious code in xenos-octans-bellatrix-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6fcbafc3bebf2ed9ba8a5cded8eb911df8c059d996f37c770dd5ab22e1e4ad8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141319 Malicious code in css-loader-terser-rimraf-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3369b39705936e81e044143deeb3d264e0c799da1d7145d7a34a47964089ea30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144056 Malicious code in jupiter-grus-terser-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df5e2407d2886b9fa89ef1a60c04e21b16194b41a1d72bd49c5379ff019f32b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142824 Malicious code in ganymede-titan-rollup-plugin-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9413cd573eaf0605e0ffed7a4a693e158084145957dfbc0cd50f5112ad02e331 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140557 Malicious code in centaurus-vuepress-concurrently-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac3d17c254d20bfae82b30318943e94b6c475fe6eaa7f65fc00ca1b3cb773d39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143476 Malicious code in hyperion-hermes-jsonp-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e3608e2c39c794c9d92a08b2aa5723896c9f48f4e929c74156c60e7d1a567b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140882 Malicious code in comet-mutation-hydra-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cf23dea65fac62655d4797e17e72c4af1c8440834c87f6901137f94fba8bf14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145934 Malicious code in package-karma-europa-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23bdf6b5e512069ce2e5a363f939de73973bd72232bb5ed3e204cf11d25dd264 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145414 Malicious code in nextjs-dynamo-gemini-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6762dff6c35a79769f64aff5cba24b6d655d7829549908382bff12256f004d89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141864 Malicious code in elara-barnard-koa-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0cbbdf075d7109a488c5c9b24914639e5f324c8f17792869971802a71e91a0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145597 Malicious code in nodemon-test-cressida-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a45f88a96a3af72b496234c0c4c6208f7411c56f0edceabe35a5af110a4566b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147345 Malicious code in rest-docusaurus-xanthus-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b51475e0d0ca1aa3b5682e8e921a79c3fd824d58ffda5d2a89baa2069c373a7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148888 Malicious code in ultra-bootes-async-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fd26e69c3e192ded739ff679b22feebc040ce7ee70091e860c1087ad35dd6ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141770 Malicious code in dotenv-safe-postcss-loader-taurus-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 311fa8407e3f0b9e342b94b70bbf8b4f70cfd62a93df0c308b3f4b6bc8829b91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141613 Malicious code in development-cache-nightwatch-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47ef7e26646978c08aed8419135ce66e36763fd4296013810cb9b553b4a84fe0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...