MAL-2025-147050 Malicious code in react-bootstrap-achernar-procyon-mini-css-extract-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47c1b7077ae1d503d6fa1608613dae97013280d40f52920ea01fd87b77227ec8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147187 Malicious code in rehype-spinner-wasat-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3c2c259413755d91ab2d7887a4bad3620fb777e89d8391c8ead79364d62b8b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143823 Malicious code in janus-nightwatch-library-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cccaae8db8792428dc7440f4cee2f05316ffa925f7b96e7cad444831d4ce99e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139868 Malicious code in babel-pegasus-xml-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c99cfe63d56d39e7c66715a4797bb30032ba8dd6254bdf514d52cf979e3706c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149014 Malicious code in upgrade-halley-hercules-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a8fea094d24b08ba278de689ffd3f83c4c26bad5f1a106c99d860a488b9ae8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140320 Malicious code in callback-vega-ganymede-yildun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dba68ef1ecbe1a9f3230f0d417d74740cde111180171008aa80948ac046ba77a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139326 Malicious code in alphard-hugo-enceladus-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aeaf093644d6c9f103a41ddf7620a9228261f4a58ad8561a551cd3a307c72f01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148019 Malicious code in soap-firebase-nightwatch-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f37f34e70ab54cb577c3b5393d72a3bb5308a49948e253e1e3981913b4212cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146330 Malicious code in polaris-commitlint-config-angular-gemini-mdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88776b0e7b1a7004d098a5bdbfd304045d25452d6edab88e8ade08aef0969c9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in postcss-procyon-xanadu-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d88030c79380d58aef26fdf412d1babc87d4120c4d6920877f4d389f9dc50bd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145105 Malicious code in module-grunt-async-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d1620c42d6b9a3626d387266ad5905f22353fd99815e09bc9822177cf2e95d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146653 Malicious code in promise-uglify-js-chalk-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d217294d5c2c2e64d732a8ea1fc726b9a504ae3f6a023ec18b1f4fe46edc6187 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142249 Malicious code in eslint-spinner-websockets-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0421cfb15af5d20fdbc70a7059ec4d30d9af7d641823e418cd674af5d3f60b4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147196 Malicious code in relay-auth0-taurus-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d514c541e34f485af825f322e9983682defc50b1bc863469364fc19e6b5a556 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149769 Malicious code in yakutsk-got-antares-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ce06be0821d032561661c0c9238657114ecb684b348a6e7cd326f717af19730 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140465 Malicious code in cassini-hapi-prettier-stylelint-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 805ba38b148cfabe8f25665943929971e9a2d370343a3be456789c8d84ec390a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148318 Malicious code in stream-graphql-levels-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad9dd5acea331a6348476e74895b9b765c53c8fc499ffe692ddcf3f700949b71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146123 Malicious code in perseus-vega-leda-csrf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbaeffe04cae6de02e05a62a3739a301bfa80d5c4d4353e8d1674a2144edc320 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139475 Malicious code in apex-charon-bellatrix-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d45efaa2137362f3875d3d485c2cbe47b7af8b35490c7f6d3da3eecf4e1be69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148727 Malicious code in tool-andromeda-kinetic-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fd6d024ed78c25836f75684b27d647a8f118519dabf7f00a4d1a5feecaf5977 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...