MAL-2025-143177 Malicious code in hapi-charon-prettier-plugin-markdown-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7e7e91d4a997d8e612394d189efa0a0befcc5026cc5b99a3fe32f91a842b1a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141505 Malicious code in deimos-sass-loader-quark-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52a22eeaf7193178e07572505c50525a46448c1593b64c2716457af244a18411 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141655 Malicious code in docusaurus-apollo-procyon-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d68775694f1a02f061a9166189e1da1036c33dc0f57dd3bad87a9118563e46c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144981 Malicious code in mini-css-extract-plugin-meteor-private-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7211b4171953c4e9f79f3fe9e5a6d0d27eb0cb456b57238fa36191cf3f046f22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141127 Malicious code in cors-izar-fusion-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebe38d42c65a80d37c46ca5fac086285b75fd0c102b0c8701b9a79460dc0b9ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deneb-neptune-pulsar-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ebb4537fea3ae4ab2a239289e78084f27c4fe58003d56783f02db600f205a66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140583 Malicious code in chai-ariel-leda-remark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e0c19fadb59ff1cfce3dcfefcb8cd39cdd8131cefd27b03e987380a8faaa1e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145479 Malicious code in nightwatch-pino-pretty-publish-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2a1c951fc5746b594ffe7ddccf0b1e29860605ad3eed07f5b638f0de0cdecc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142298 Malicious code in europa-vuepress-sass-loader-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dc630cc3b9853a3e4a5ab5e6fa977d883baedf6edd8f9d7ea2803d49476a0cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148152 Malicious code in spica-capella-optimize-css-assets-webpack-plugin-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89f124e4d557c8feabc6de44830d46d279b20eda791ae7444d095204eba1dc2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139935 Malicious code in bellatrix-element-ui-native-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1d1043cedb1fdedef8a8f3bc8f478c9b74d28d60356cae5f3555fb9b7ae998c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148557 Malicious code in terser-webpack-plugin-mutation-mutation-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 093f6cd3625f88f87ec25dec35d3e27866fde2e123a38d30403db5f1abcf7846 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tool-kronos-cosmos-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bed330d8af17fc20256082e46943972fa13d6525c3250e3a246e530e91f9ea48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147662 Malicious code in sass-loader-cassini-socketio-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39ab95f0501dc0a030fc5556c18a95ff3c795c37a88420e23f40f0791373f795 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140998 Malicious code in commitlint-zenobia-run-script-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16404836c6f02879318bd5e43d055f2dac1eb55ecd652eff9934d63f3c3f7e6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141424 Malicious code in cz-conventional-changelog-markdown-metalsmith-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9482e36bbe4901e1af6bb14db59f11eac88fd2d639fb758299a6a41f7db6f35d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142594 Malicious code in fork-mocha-yonder-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99c491513b6938921ca5241a8998339c02828360ecd28a9321d7c0c9a7ef54ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148089 Malicious code in solis-spinner-canopus-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70de15daf42e5880fe1aef7c23ceaf254db562fb9cb058e44b29f7c137f04ec1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140090 Malicious code in bootes-sadr-epimetheus-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f7187ed92b4f0fa96ef7df782f26c59bcdeb9ee008077d0be627c6ee0307554 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142219 Malicious code in eslint-gatsby-init-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2927981e2214a116cfa4d45c9f21260f04a036db99fe2eeedc2531cb6b09dc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...