MAL-2025-149585 Malicious code in writable-yakutsk-loglevel-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6898ceb5699951bcb17b152597db3038f274c8ddb303c8ba3ef5c815fba5f232 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143229 Malicious code in helios-css-loader-kastra-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 633c687aa376abebf8cfe06e2dc3aaa0c30eb2065e0fdf8373b6e67332e7882b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145737 Malicious code in oauth-writable-aurora-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d3f2a474d3e4a74eab03cf604f088784cff2d8d6ca11d9e9518f1abb8775970 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149462 Malicious code in wezen-mira-morgan-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aced490826c2d7edbe824a07a4bbed1a8ee680171c14127269d06d326744906a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148765 Malicious code in transform-json-react-bootstrap-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee56afed477b3208f399ace13da17ece3997d082d7f14dd42a008e1e2715e635 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141596 Malicious code in despina-fusion-typeorm-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40abb8a24d7c690b5112addea229e5308d47adda807501e929ab97cdaacc57c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149400 Malicious code in webpack-kaus-flare-rehype (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75e99fda20e82afdea814a9ed77b877a7de3a8764ca4fffd9bd6948b8fd273ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145467 Malicious code in nightwatch-fomalhaut-less-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb8383b61773b5aa6e2d7e266beb1e5d0d03731d8d57cbef93747ba115ed2749 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139338 Malicious code in alphard-pulsar-umbriel-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9706a403cde30f3b89e6bdab6ed0efd2615e48746d0458d5f5ccac299ba6ecc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142219 Malicious code in eslint-gatsby-init-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2927981e2214a116cfa4d45c9f21260f04a036db99fe2eeedc2531cb6b09dc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143077 Malicious code in grunt-stream-rest-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 738247151f180588c56546db685b85a7ed478e77a9961371b2a46f8c2610da6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145784 Malicious code in octans-upgrade-celeste-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6820d8f46993738f98dec508b4393021d4bdbcb9dce746d48ce684c3ee1fb7cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148152 Malicious code in spica-capella-optimize-css-assets-webpack-plugin-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89f124e4d557c8feabc6de44830d46d279b20eda791ae7444d095204eba1dc2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139935 Malicious code in bellatrix-element-ui-native-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1d1043cedb1fdedef8a8f3bc8f478c9b74d28d60356cae5f3555fb9b7ae998c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148268 Malicious code in start-cosmos-soap-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c1ba368fddb4ebbcb5c479a5aeffb91aed8d9906574a5bdf14d47291ed1c503 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143639 Malicious code in inquirer-betelgeuse-perseus-centaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af856ce8424780e448bc2e4ae72c9e125282095bea8380baf39f32da29543d4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140941 Malicious code in commitizen-spawn-csv-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 216aa139732e8f8ebbeb9efa1d382e08a1049395c2a03bbfb6ae1873421a9b11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140090 Malicious code in bootes-sadr-epimetheus-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f7187ed92b4f0fa96ef7df782f26c59bcdeb9ee008077d0be627c6ee0307554 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145479 Malicious code in nightwatch-pino-pretty-publish-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2a1c951fc5746b594ffe7ddccf0b1e29860605ad3eed07f5b638f0de0cdecc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140649 Malicious code in chalk-mini-css-extract-plugin-await-xo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc95d987297d2296f6f6c0e9d232cbc6e474b2557b42681d1cf2da9395a8e419 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...