MAL-2025-142325 Malicious code in event-spica-gridsome-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6f0c6290eac850e1d6c4cb0fc81023c3fbee17e9f5b5395d1c16f9dc4ec4e83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in config-commitlint-config-angular-jwt-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48bdbdc79d93ea440f525e4fd0e99adb460f2672fb88a405befb6ad65a363dcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147013 Malicious code in radiant-development-eslint-plugin-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 293c42ba0700755d809e0cffb5dd4eee0f25f2209932a17eabac567d484bb08f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140995 Malicious code in commitlint-triton-less-loader-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 359f28fccd67ed92da7ca0e7b2618ad8b2231c15a5d76882a1f4682b81ed5219 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142072 Malicious code in envconfig-csv-build-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa540d749d3bafec4df5a69032f942824402ebe3bf915276f5f9071e5251564c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141012 Malicious code in concurrently-rollup-plugin-pino-pretty-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25fe62b6fcf916ddbab500c08a99898ec65b9eb1a259f6363bd0e30f51ffaf86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141180 Malicious code in cosmiconfig-firebase-warp-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eee21f35eb9805d7f31c7f493c82f906f9774634ec1b223e8d3c7fafec2331c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143744 Malicious code in iota-triton-writable-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1439b571c88fef6fd5907adc4a1e16f9fb19de36f7e8ba79622ff79a3c34b79b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146312 Malicious code in pm2-slidev-jasmine-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9c82d63bfdb148f6abe378d700534b1418f2f121eb93d5f772f86aee9aa7dce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148691 Malicious code in titan-polaris-wolf-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9cd593eb7cd0784d0722fc9a9b4d17c974690e19d815b6ecb4f18d1ba7ba392 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143814 Malicious code in janus-jekyll-parcel-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e089175016e2fd98fcc7c70267365ac25096a7d0e92459ca5ba25280086f96c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145108 Malicious code in module-lint-rehype-optimize-css-assets-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2939b8efc57b0447f1e6a1c6ac30eb1b3c5f6a835d155211f5ef7e8a4b2a4009 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149189 Malicious code in vortex-postcss-loader-auriga-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d10ce1ac30588bafdfef6bef36489e659c355f7c931e391a7ccbe7e2dd3712a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in helios-css-loader-kastra-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 633c687aa376abebf8cfe06e2dc3aaa0c30eb2065e0fdf8373b6e67332e7882b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143826 Malicious code in janus-phoebe-frontend-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25c37d2a1b88d64ce81d8305c6d62f9a615edc4b8d367f36f9756ac7f1b6106a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143313 Malicious code in hermes-css-minimizer-webpack-plugin-local-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e2c81158c907717901718ca894e86e52cd0ff7bb06409578ce68b8cd5a40ca4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145710 Malicious code in nuxtjs-polaris-google-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70a059d4f6f8befc217803d2bc110b92360c80662b5242c31399896692d4dd6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142776 Malicious code in gacrux-octans-install-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f459054cf2b975246d8f9f1230a9f2f32ab9a8cee1ebb4b00938c60accaa03fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blitz-solis-mdx-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eac0a972116745bee47e642e59aeb49f9ef45e7048afbf60a8face542146c8f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electron-builder-gridsome-callback-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d649fb3727c16290ecd60b5cbbaca8040d62a9ceac4ce113ad39d98f13ab77b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...