MAL-2025-140579 Malicious code in ceres-telesto-bootstrap-optimize-css-assets-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1963d409fb2d23eef932cebebd3c943bfc90713c7057abbfab42485f32f74887 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144673 Malicious code in magellan-vortex-update-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f82c6172c917e1fe89c1b3de08f1f7b8fb7a88d57cd33429fa4cb05c4baf99f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148351 Malicious code in subscription-betelgeuse-firebase-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a86da098267850c1ea2f84f7c95cf2a13be0d82f977239055c909cad597e838f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146131 Malicious code in phenomic-element-ui-publish-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba58e853d0af0e2664e70c345523ddd91c142e1fa69ff52e7e8d1545fc87d569 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140354 Malicious code in callisto-winston-socketio-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcc61cda68c18f9ee8fdafde47a595f3676d0480aa45bc379dd3acb84c0592d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147119 Malicious code in redis-yakutsk-hyperion-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 534ca0e61257cfa29cd62dee33a04665382cd6255381a16018d3b0f297226fca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145889 Malicious code in ora-markdown-janus-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8b7bd4b1c1d39a7f7495b0a9cf4b4e469251a3c28e38498d153c59c70b92a32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143539 Malicious code in impulse-dorado-kinetic-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa9e67ebfd227fed972db13048c60c0cd362f419c897718acfb9b05f62a5c653 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147978 Malicious code in sirius-spawn-chromedriver-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dc5d124420e86b1c5400344bb1baaefbf2c44048bd0b668422e414bac3499a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145984 Malicious code in passport-less-loader-carpo-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0fe9325aa3354258e2c3512db500954ad0ee85cfa988bc0b86a7da175a12025 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142708 Malicious code in frontend-meissa-scripts-charon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b7993005ccd89c0204660a1eabf207f62018f8177e86a80e44ab904f81bd861 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145913 Malicious code in orbit-thuban-child-process-writable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c69434b1c25dc4427b5759fbfb809886fd0b6b03c34ae3d2899345893727ae36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140881 Malicious code in comet-mira-lyra-prettier-stylelint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c9a1aeeac3691d5a766fdca3a7307d890a9cf2c5a2f47a2dee1a19284483fd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141538 Malicious code in deneb-centauri-pulsar-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69a6526bda239de64c4d9457ab972fd6ad08c667ce2fed1a79a3cf3f4a444fd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148508 Malicious code in terser-achernar-cassini-astro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 541cbd79218ff5344b593c40f24122914bc7da1ce7b64e3ba525419b25e42bb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140059 Malicious code in blitz-regulus-phoebe-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c368bd40559bad0ddf703829fa576b4ca7c291b37720efd08a9211e177fc52d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149158 Malicious code in virgo-halley-norma-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dcd7da4e4986eec5dab4e8e83d3b4496f034399ef46a1ac01bc2c091f61fd5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149770 Malicious code in yakutsk-html-webpack-plugin-koa-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0318917796ae63cd084347e53a572874ffb930573ff36461e8af28c5b169c5f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139873 Malicious code in babel-standard-nightwatch-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a3bbf98de347e5fbf986b9ea736e9b2918562ec8c586a4d122711b09dbd8d02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149446 Malicious code in weywot-schema-relay-warp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76671588f93dcd3775fb5621c6845d8a99c2909349a2f0772ff25b85769e7ae5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...