MAL-2025-148773 Malicious code in transform-sass-loader-polaris-relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc183012c84bdd3ddd136d2b621899f44ba21be8be6e0b94f9719cf50b67722c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147457 Malicious code in rimraf-pegasus-blaze-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65013a25305c06788d4bd511b1ba06e797528dce411fd77dba655986b5ca4b61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142068 Malicious code in enif-xml-ganymede-draco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09d6bf45f42d7c5e4e663d9d0d0294a204b3de5cefaaef767fc85696f614a6e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142886 Malicious code in geckodriver-uninstall-husky-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7a2b7f6230965f27a6954f78531a9e677cb5f7407f313086cab21ff0979a6d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147875 Malicious code in sequelize-private-triton-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a6a9a1c5dcde551eb14e7da9977fb75ff1dc416e1129cc4554098611f50076a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148433 Malicious code in sync-sedna-titan-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f21b6da689a26b9fc953c4b51dcbd64b26126504fefc42aca279aa0cee6f1b4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143446 Malicious code in hydra-magellan-forever-astro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bed082a87e1a73d52a9e4f4597ac674f33c39b390062dd38d182ae7391324c8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140635 Malicious code in chalk-draco-wezen-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90b6b4cf0c27e8f1ed145b096b6bda80b9337b30903760551a33b4c905bb8224 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145862 Malicious code in optimize-css-assets-webpack-plugin-hyperion-dotenv-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43658c46bebb5ee585b5255be57e828215cec8078d22d2bbf56c9313f7277ab1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148495 Malicious code in telesto-hercules-axios-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 422ace812daff57c69b2929734f5e4dcff2755e162c1bb4d9ec8ccb6978d5c00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143952 Malicious code in jovian-mira-blaze-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d7a31a0701b775544671d1d8f873a6e0cfd3eac66a6004ec3924bbdd70f5eca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140836 Malicious code in cluster-sync-development-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24ded04885cce013370c43c85d9b42e94e798f39aab69a13d49118a8fb5df4d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143695 Malicious code in io-eslint-plugin-yonder-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55f1228c8a0e8e5f1e992545733045dd7f98234974ca9ca788f347f162434515 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143988 Malicious code in jsonp-barnard-wolf-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33b72f6f1b19f9f156958d490ca0d6d358ae7e033f2904c41603c1671e55d1b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141769 Malicious code in dotenv-safe-pino-pretty-weywot-jwt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0660d191b8889bfff42b4b24d6a2b80d53d8a238e8d3863edf6dfcf5780199a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141566 Malicious code in dependencies-envconfig-bootes-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c603800bbff9b6886548978ff6df941a13ca7f23109be574c0f203af1e116c31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142502 Malicious code in firebase-materialize-morgan-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c444fbf2a36d713c252f259fbddfccb959e738bcd08fbe47992b6bdb5d7ea552 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142208 Malicious code in eslint-config-query-cosmiconfig-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3d4f67a49c2f8660c00eb78d5b0cd0ee38842af3b08524b54732d34fb48df93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146283 Malicious code in playwright-mensa-build-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd565218ad210ae83638b08826afd3326949158b5c7ad8415737c705310ebae3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142399 Malicious code in farout-blitz-yildun-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac7ec6924a4e3e3a69ef538be213700fa6c9eb4b713ec06552ec0ab4a7fdf741 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...