MAL-2025-148158 Malicious code in spica-css-loader-testcafe-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36597f416ec7c190e827446bd569c4ad103c21ea45306506b1fa9419bb85a499 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140444 Malicious code in carpo-ignite-electron-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7b7c30af3b3626ed4d0c18eee5818fbc188b087d67563e7607290b27fe3b630 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144181 Malicious code in kinetic-pino-pretty-centauri-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a32af7d0f49e379c176a6e6103f86e25cb05acecb7aad3d0e0bb45637def324e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147790 Malicious code in sedna-regulus-iota-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8b8ec49fe6c4fab613bdf976a420affd1bf19ba986d1757efa996391dabf75f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140392 Malicious code in capella-meissa-chakra-ui-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d859cb2764f8b3a39fa333e103e88f965fa0aace5be1b50ec0f1f2899495610 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143749 Malicious code in iota-webdriverio-solis-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4629d0df2dedd06e5769bfbd601cde8199384d4cdf2eea2e5e5bcab3efbbe6c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146495 Malicious code in prettier-plugin-markdown-sedna-sagitta-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 458b40a7e21ed9c73ea33d3e2828ad4a708c2484f3fe0ba8a02d4a89de882286 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143925 Malicious code in jest-heka-wasat-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04249879ac576d79fc9e7765efb7d944f2ea8639c65cc9aad3dba332dcfc98a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141340 Malicious code in csv-ariel-sirius-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb0e61ae6839d445fb388ec17f3094ac1fd74c68c9d057251528b87749bff4a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142625 Malicious code in fornax-hermes-soap-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d020f29de3afe6cb948bf0aaf77863bd0e8e830591087dadf33cfbb7f2c86de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146941 Malicious code in quasar-bulma-tethys-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce8e67c18daeeacbb5f975e2833c77be01cc75cd8706f8f443d850d65db26167 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148906 Malicious code in ultra-rehype-deimos-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32ade24bb378c76c036b71f2cbd39bf86692a9c9c7c9737f14ddbb3b7e65e841 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141380 Malicious code in cygnus-standard-apollo-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f60d60ec031b81ffb48378ce94a8bb54350c86dbabe71fe1e95d3463ef3400d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140299 Malicious code in callback-jupiter-indus-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 015e140f9348d1ed745a5a6d1c04a6641eb654cdc38b580dd2bde82c9858ca31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148184 Malicious code in spinner-adonis-jest-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8ce7a252c8fb466cb202f8d2441a363fa351a5ccf8b69a0cfdd48a0238bb6d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140728 Malicious code in charon-nashira-sadr-impulse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 471d77464164cfac546ba4f577e60570c874f11f1c635652f7ddc1de60c3aefa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144985 Malicious code in mini-css-extract-plugin-orbit-meissa-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb93c8482597f34bab21322649a57417242e99b962b98baa32604bfe83455ed3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139512 Malicious code in apollo-fornax-mdx-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01371186693cd024e100ee510bb53e5d734a9461fbc86607990f005fe83045b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143822 Malicious code in janus-nightwatch-aquarius-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4271b28738e8c99a3598fe804e43d022d475a7857d6901558568c2c3c6fab9d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144165 Malicious code in kinetic-bunyan-dotenv-safe-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed537f4b241212a2b089f240ee57dc89cbad1679d4794a48fcc80d8ad47914fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...