MAL-2025-149091 Malicious code in vega-io-prettier-stylelint-development (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fdba254f331a198ad29d4f9ac5c0b302bbe4413db07312639d2a4882d8bc2c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148550 Malicious code in terser-webpack-plugin-farout-cosmos-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e245a0b299866a7dc32c456440ab8b9911dc437c59e97625873a76f7246d356 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145763 Malicious code in octans-blitz-meteor-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a4371531f66e76c21381869af17ca3e23ae3771e2f22bc30ec2763d6dfe81e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142191 Malicious code in eslint-config-bellatrix-protractor-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bf8253f0bb4c5dfa0706e3aa11ece2602cb3173ebc9d40933c0c990a53a0814 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142276 Malicious code in europa-jwt-cygnus-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f55ce391fea8ffa909069d2105df952902ee3d59197e6391746408eaeb185e04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148454 Malicious code in tailwindcss-slides-winston-helmet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 733ce9136674cb87bfbe45bca430ced7d0d162b89031a35213285b7e79bf140b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144724 Malicious code in markdownlint-phoebe-aquarius-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97bc05a74a579980324723e78032930d587d6d67a1b120c30a59e228eeb4a720 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146935 Malicious code in quark-quark-nashira-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 914f834f4b21cb90921290893bd5c244d57a77e5c7b1290b8eb6ad292bf0b7a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145138 Malicious code in mongodb-rate-limiter-sagitta-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26e103233460522c7309a14483bace6fde42720b89098c9209f4e77d9a5d28da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143886 Malicious code in javascript-pipe-docusaurus-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe24f071b8345b4565c3d327bb46b81da8836d9ef89d16fe70049e65458960e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148442 Malicious code in tailwindcss-halley-rigel-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19e59a929e803ed76eba31c1878356ac7e0a11e3f714bbe16685f7858ce73f7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145816 Malicious code in ophiuchus-got-perseus-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db03ad94a523479b2eff4c7204a7b1a786f887f15f2a953ae986b77d962c4be4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148698 Malicious code in titan-winston-commitlint-config-angular-elara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 129fb702d4c17a8cadb39c9c2e95434509dad7fe2d7c1502a86ce3a8386bc6ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144515 Malicious code in loglevel-mensa-pegasus-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae2afc3e2aee8b3966ed7531a5d556897d37bc1bdf1d7ad73a0850368bc5bc7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141570 Malicious code in dependencies-install-xenon-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 175cd2eca6ada3157adf3a6480fd5aaae846d63b51c649e4c9b450878d26785e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148318 Malicious code in stream-graphql-levels-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad9dd5acea331a6348476e74895b9b765c53c8fc499ffe692ddcf3f700949b71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143223 Malicious code in helios-acamar-cypress-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9574053cd71576ee0f80d65ab6fd694f6fcf07821d3526d0442742f118fc9909 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blaze-uglify-js-schema-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f8d5f1ce6793923e6a5f433e28c137a347dd3e3071b1cfcf658b2ec25fcd7b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141044 Malicious code in config-xenos-procyon-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e11ee2587ab693fa07da5ba1b7292c5c142aedc22b57b70a9ab70a5176f3aa6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145720 Malicious code in nuxtjs-webdriver-manager-nestjs-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 552bfefc3abd180f3221957493030336f0321332917a5f0e47b77fbf14eaac11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...