MAL-2025-141636 Malicious code in development-telesto-element-ui-levels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 653dbe7a5276e8673d5e93cb34a5cf9263ad039fe9cd23560d52d90219aec1a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148454 Malicious code in tailwindcss-slides-winston-helmet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 733ce9136674cb87bfbe45bca430ced7d0d162b89031a35213285b7e79bf140b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149545 Malicious code in wolf-cross-env-markdown-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bf92b6b8c6a2644f72700eeb3abdadd149b76826d296338e032bf88f95a1e0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146371 Malicious code in polaris-spectron-webdriver-polaris-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de9b9ff97fe536b1a7c34d7a66616c0c17e2c8256579695b9bc28f5abf6d95e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146504 Malicious code in prettier-soap-io-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c8f6b1234992cc9122d8dc53fa5c86ab2c85ba860f34355df6f2422a225026c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitlint-inquirer-run-script-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 488f28521232da95e63a6edd9fb762f1d2effcbc53e3dd58de1c4f35e3bf3ce6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chromedriver-framework-private-less (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88d375d7091322fdaae73b2a3edbe7c96c32587195cf1297018f3f6329e3853b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in event-proxima-webdriver-mocha-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11534f986c769a549d28a9789876bdef3b468105ec0b90b7b0761a0e8c11c1a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enceladus-alphard-tool-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc835461937ec8ab9e335744183882bfdb9da209471bb7b831e581a688188008 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in playwright-stream-playwright-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68b3fd81d19302da9d8cc7b33e3af97084a394baaaa387caa7dcc86a22a5b040 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitizen-await-commitlint-config-angular-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3ca5ab4510a606274ae8a004323b0e1abe851ab2bd6248263f9b5647d2de6aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in norma-antares-react-bootstrap-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cba04a759870f861ae77433b3e92b040853659b2a6f06f8e8d118c3e476f9e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in radiant-charon-jwt-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c7c17e325cdfd81b50bfbe7da11a4618b5b0413548e5d5ae0b0dff6f46a53f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webpack-prettier-stylelint-indus-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d64921929eec39375b7dbf92fa014626fad9648c6b0c294de247a2fb6e2fc88c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in metalsmith-dione-phoebe-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b7fa0a724ed7a8a460cc993e6fe4b7139d1c9efafe18cecdbdc2df864e2c1a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gacrux-airbnb-dynamo-xenon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 082cabb88f73574de63100da1917ecdec09c5505d222982c49f8283faee9254b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mui-spectron-webdriver-neptune-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac3dfd0864f7e0dcf314827f16451b16494d60b30f668d67b260559a36c58763 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in procyon-kastra-jwt-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27adb475c01b655934995cdcafe5af454454fbd4beeed4ca694c1c812cbac919 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andromeda-octans-gravity-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b903c2efd3a322297db69de5c623515a807cd44a60b84bf8a58bc1eb00a0b98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iota-nestjs-firebase-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca0dde942382f6ddca3adc5a8a1f9067c84a87ce3dedd4773c5f204d394ce2fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...