MAL-2025-141191 Malicious code in cosmiconfig-nextjs-tailwindcss-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cb61a59a4c5387bf62fb5b1b0c1e546a26f65fc5263ca200c39bad00b2c76c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148440 Malicious code in tailwindcss-callback-andromeda-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e505f4e6d9208cd51691158f4278db516aac83cf0aefb73175dec5fbe346434 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113633

Malicious code in figures-postgres-tailwindcss-css-minimizer-webpack-plugin npm...

Malicious code in rest-tailwindcss-hyperion-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e22a4a72ba894fba6775542bbfed8bdd8794b17d73198abd401b0c381988505 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112566

Malicious code in impulse-hugo-hermes-tailwindcss npm...

EUVD-2025-112504

Malicious code in ini-tailwindcss-playwright-nova npm...

EUVD-2025-112449

Malicious code in inquirer-tailwindcss-sqlite-sirius npm...

MAL-2025-148443 Malicious code in tailwindcss-helios-magellan-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cbe3100900f2c9509fc6f154b180c84405648bb95b758aa7ea544adf22ad91f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148456 Malicious code in tailwindcss-style-loader-corvus-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 360dda3cbdf0ad64d11cf806ebe3a954d387a100ad64aff35dfb9ca17fcb04b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143547 Malicious code in impulse-hugo-hermes-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1214df154058bf8b9ff26ea1d90732fb3d0d8f7a49008ca86fb3a19a49be8f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148454 Malicious code in tailwindcss-slides-winston-helmet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 733ce9136674cb87bfbe45bca430ced7d0d162b89031a35213285b7e79bf140b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146119 Malicious code in perseus-tailwindcss-sagitta-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe718078873d5a61ddb4eb1d9bf6a74722c114987d641c9b5a9f4a5a7d467c0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142780 Malicious code in gacrux-publish-tailwindcss-bootes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85d37f5a3c4214caccf7c82701f651d7efb773236d74e1fff5946573dbc65889 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148446 Malicious code in tailwindcss-link-eleventy-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b49ebc1e11460b446c5c5307ff7dc44ff2b2888e9c27a939ba49a5527c724633 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139790 Malicious code in avior-webdriver-manager-tailwindcss-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20488f7b96c14a7d14e0afc2ebb7f50a71666b0fa8b83d4f4b59ade06ed380fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148449 Malicious code in tailwindcss-oberon-fusion-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 232e75b055fc6230a800b89b059a9525beee5af58139c6d0f9ac05f8229b7a48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141274 Malicious code in cross-env-tailwindcss-got-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfebaf96f22fd8860a88ac0184b73b01ba60142ae6ef17a441f56736de49ec77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143141 Malicious code in halley-framework-xanthus-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9424fa3fa842a5316d32f3fef4b6332332febc04af137268f22f13e138b7869a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143981 Malicious code in json-proxima-tailwindcss-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fb74997a4a6c88093ebe105687a6d4d7790592f71e1bb9ef948236906dcee08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148455 Malicious code in tailwindcss-slidev-antd-elara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0be2c69fad5b110b2dbeeea015fbe299ab9aa61c3feaa29d68a296c5fbf22be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...