MAL-2025-143505 Malicious code in ignite-antares-terser-webpack-plugin-mini-css-extract-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 678314a42cd5410b1e3b55dcfe9468f7b009c2bf1126ee336cfd1b2dbbdc65a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145277 Malicious code in nashira-juno-markdown-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0341b08d5f2ccd87fa18915de455941efd4dc2d2bf55d556c366ea0889c11f28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145140 Malicious code in mongodb-server-yakutsk-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57dcaba764b7d0683fc08db311198f703cf88073de862611d3f71439e3a4ded1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149170 Malicious code in virgo-semantic-ui-jekyll-kaus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5d4e3e628d28d18ae33ed261c564433b0747ad9352364187f69369a139f24cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145512 Malicious code in node-config-juno-install-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0607f694a245a8b1cdbab9bae5459fc129030729b93bd131369458ec27cb9c38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scorpius-xenon-ariel-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e1e4e38e52a8671395f4bc99d4b8fd899597b95008321a521a2a9351afdab05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carpo-ganymede-kastra-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7afb774a53ba565469f8094ace021d2bfe40abb0b43530b02ab62cd932873e43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in npm-helios-nuxtjs-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62d011b06489abe320d03829c7aeb72ebc9c37f4a034533c6bde985f438dae83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in io-non-blocking-hermes-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81e912fa9fe5b8d5a18c97a42e23f1132d7c6cf5fe549a8391ad13d919332923 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-parse-variables-nashira-hapi-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f13e1d855ebbd081de4732709aa42f352212523da47dd75c981a0026bc5281d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neptune-mongoose-kastra-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43400e1607f9419af64ffd8712bb415e4aa32335781b992078ce9a22e64c58a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146561 Malicious code in process-nightmare-corvus-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8459dcf63d07e643ce12479580318ca479b9443183b139b99a36fcc6544ce78f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140365 Malicious code in canopus-nextjs-cz-conventional-changelog-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3bccbd45c710b8f6f1f3255a43b78cd7e70beb6efb60b17e950621c6b86d8b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145163 Malicious code in mongoose-prompts-spectron-lint-staged (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 664e602c1c1f17845de88222beb490ff65a987dcab2ecaa0d720d4c748d9beae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144743 Malicious code in materialize-fork-redis-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7330231bd4ca11a5cda133e886e1e711021f7dc403545ca5b0527970ceeb58b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143712 Malicious code in iota-bellatrix-husky-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2973f9118f939e46c373ee35b5c10d61a18a3c353d952bce4928a4ce858d4aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140332 Malicious code in callisto-fornax-yakutsk-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92d4146fe49f7b6256b420a78fcb513ed920fd481edd057f15304dfa337fa61c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nconf-winston-rigel-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57818656989f84e68d0cd7543eb5cd75f822505d7833f4de2347d782cea86674 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gemini-server-ini-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6f5d0360722cdc73ccb7eac133b17b09cfa918f7f0436c2a0cfa464bd4b5a0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wolf-yaml-morgan-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f25206e1cd05dc85dd05c82e73701f1ebe05803670e00cc1cfb99149f6ee5cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...