MAL-2025-141334 Malicious code in css-minimizer-webpack-plugin-transport-spawn-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4726ae38cccfb92349767aa6eb73f557bdef28389337380ecb62004c3fa5514 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149044 Malicious code in ursa-bootes-fornax-norma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af6e382da872237546ac26a0a389df759f947829b129c8d324ad31240b58c7a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146587 Malicious code in procyon-electron-builder-reveal-md-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7518acacb96de24373340279d53a0148b892df20cd202ec9fe2984a89e00f5a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140435 Malicious code in carpo-centauri-commitlint-config-angular-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47297371af1cf02d6849edb62adb000fcbda44132fb3a3c3954bf6ef90e9675a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146115 Malicious code in perseus-sirius-proxima-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fd3f78f5cdd8c01a25adeca745497990e214ea544a47efc4370974b71923249 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140654 Malicious code in chalk-run-script-prompts-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82ea2258006845312d46ca56f78e72c5ffbae2d7e22d59b5775e81b258d8558c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142704 Malicious code in frontend-hydra-morgan-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2b963aa21771fb79afb2a1d90627a8185e9f4f8c71fc8ee3b0bdbd1516edec9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146617 Malicious code in procyon-supervisor-mongoose-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af5648c869f07e16773d5b96576042868921da16a9552c5dfcf968048dec6e78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139701 Malicious code in aurora-luna-ophiuchus-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7529c8b52158312b60e08e1fc053d2008b88292b60a340f064f9c5321f2c53c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147419 Malicious code in reveal-md-oauth-jsonp-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 942efe758bf59cfbd35ecde32f1b9cba47a8915da2bea6632870da311e5ee031 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141544 Malicious code in deneb-heka-callisto-xenon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c47df3bef2c700947f281909714cddff1d29ff8299d9ce06f60c0db7d466a173 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142447 Malicious code in fetch-husky-slides-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cb8880199d75a5db2d02dd91a1ba2e0c5eca450d26a8d696a8074ac48e4e0fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145606 Malicious code in non-blocking-development-avior-deneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b6100a1aca3472a8e1da2302a8ac42b4ea6b7790af85fb94874b2750fd4e98c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144690 Malicious code in markdown-pdf-dagda-equinox-xenos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b733d89a3db7076a64d9bff93d5266b3f7675edb92decffd204c63f8e5aeb96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142514 Malicious code in firebase-selenium-fornax-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43ca74fc3da3c018a21c302ae9e9cefd4d0ff7b1db8d2b95dba91c29ec2b756e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142617 Malicious code in fornax-electron-builder-electron-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89451cce2a5eb649d2d41e81bac9973e221fc357c00c5c02407d9fc9dbb119ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142432 Malicious code in fetch-await-epimetheus-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d55f3198a2540c23b7469e15f06bd95fec082c5ff6af5c5fa7386896da555ad8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in taurus-zenith-slides-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01309bcfdd69dd813ad7fd9065b671bf36401dbacfe9b942e780008bb7b800d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comet-materialize-hermes-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 988f0f6bed7c9829fc6dd7e606fbbd189ed26bde48bd3afbbdc2023c20065626 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148608 Malicious code in testcafe-webdriver-manager-pm2-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f846e3d65d5e5703d9a9fb9b98b8be41399db85e6feb68da6523eaea3c0cccf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...