MAL-2025-142006 Malicious code in eleventy-mui-public-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b7c3923fbceba850a7b53be6ef71d2a7320d78a6eb269991e0173371bd66543 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143402 Malicious code in hugo-spectron-webdriver-oauth-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d0ebeb42b34d178ed1859055aca3c46a2421dea6dab1676a05906f340af7f1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145249 Malicious code in mysql-janus-chromedriver-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c904af5710a1d1c2af77e3315bee7c6b13290ac02f7195ddea52a05a82ff104 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148422 Malicious code in sync-eclipse-metalsmith-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cb8a567b6169c24bd6deef07a712d7be0b560e33e7167f55dbb701734528a7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147654 Malicious code in sails-nightwatch-lint-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaba70c69ea7047e807d10d5242488b343ba93f28240c3d7528725e1f00a1ef8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144218 Malicious code in kronos-gridsome-eslint-plugin-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d49831c60df02a4ec563dc66764d272a886cb44223adb4887a15af6b9ab643b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141199 Malicious code in cosmos-antares-avior-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 617d6e5eff2b19a1a89297c4b75094e3aa4bde467ac80950ff66e9485eabcae9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141867 Malicious code in elara-celeste-unuk-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 224c7375ba8187319a69a0db35e2cb1ee4fcd46fa4536d4633fa4f99f79a0254 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140471 Malicious code in cassini-native-blitz-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57e9c1ddd23dbb7b4ae51e472bf7ef3b30980708e67a3f5144acea3514052e2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147400 Malicious code in restart-vulcan-slides-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1416529f490fb914cb006a56abdab3149c6a5548526f1b0994d74c7e60aa2b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145187 Malicious code in morgan-release-it-umbriel-pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e3a7442fa158b3448186041804b991a98c63c2e060a0da1051863fc9ef2f804 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144750 Malicious code in materialize-postcss-triton-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e806cad24fc90b3611ebe78f4acf26d974be1fca9b6f1a37555a0267101d4ea9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141538 Malicious code in deneb-centauri-pulsar-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69a6526bda239de64c4d9457ab972fd6ad08c667ce2fed1a79a3cf3f4a444fd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140837 Malicious code in cluster-testcafe-chalk-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e51d2d3f0008db6e091e6cc177cb67d46eb5d7335d782a5b703409653d2bcfdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148452 Malicious code in tailwindcss-rehype-nightmare-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3f082e8e688e52330227d64ed4159b14898c0941aa30e28c8b117a0b64445ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146097 Malicious code in perseus-magellan-cosmiconfig-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 894871c32dec81809809ea575078f376ee66a5c707755a567776c6915122c4e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143277 Malicious code in hercules-configstore-telesto-vulcan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ac6d123a83e0adad67619b53cb90be0f24177b7f9990c76a5d254c073cd35b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149773 Malicious code in yakutsk-kastra-webpack-release-it (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da31a94dea166f9732544d8bc74d15fb23b8b8d49f3dcd8465de86a7b8ba7022 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149822 Malicious code in yildun-rehype-javascript-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd7450993f2ee006c4a6d5bd8bc981fba7295d59c3471a8aabaecaeb1fe49589 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142260 Malicious code in europa-commitlint-config-angular-eslint-config-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac69d03d5052b7d7839c54988d814db0cb9163ed9337f3cc821782762132eb64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...