MAL-2025-145860 Malicious code in optimize-css-assets-webpack-plugin-config-bunyan-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a271f5b41993cdab8696ed3c8a08371cdbc6ca90fca62b3ebd1fe492a130b7fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147607 Malicious code in sagitta-oberon-json-sadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25cb20254e1fba013cee3ebbdc026315453ab57faff4d5dd7e2f54f5ae271983 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139794 Malicious code in await-castor-middleware-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bce9d7732b56596adfb5fda97c2500f0a29f16cdba6713c3badf04c3d81f0b63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139851 Malicious code in babel-delphinus-envconfig-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8046a5c617b1040dbc97962fa241b562a14f16e3039d8bc96bac9c765ea34405 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143769 Malicious code in jabbah-astro-update-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb48d05c71d4e664abc9f344c8ae0080f7d1f437b56a3bfa83439c01a3b1374b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146667 Malicious code in prompts-less-loader-child-process-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66bfea49021b595c84561663f6b7c03b3694d20acdf6ee80ebfc5590c4deb503 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cosmiconfig-prettier-stylelint-centaurus-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b2b3af4f75fa5fb6640299c10d355b8a8184131a97251ab5b51ba36f1474cf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quantum-deimos-colors-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a78a3e303545fe7a4cf7c007b28503496a490a019602bff17224b9d992cec9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jekyll-elektra-vortex-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88c959720c38f7a9ad315da296dda18f9ef35605b92b08d3fed920e1e332b18c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gatsby-antares-metalsmith-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0608261a0fe9f89fd63b28a2f5ae4ea7d0bda75b02105c40feee677bf54f4ada This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141009 Malicious code in concurrently-oberon-docusaurus-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8788c9948d1b666bf7589ea421a9f440e0c6e9f86e0cac0940f16fa789762918 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140563 Malicious code in ceres-electron-builder-nuxtjs-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e27af84557abb99210e779cdf34c4b8aa18e306ab7d8f146d19b2a1a8fcfff34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colors-procyon-materialize-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbf32de71538c5a3fc936507de3a7014c69435ee1c7ace63acb5b28f209849a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yaml-ophiuchus-hyperion-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 391e658c8a08a9667776016b9b6caa23975d58346ee82c0e81f3025358eb9a02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in global-nuxtjs-antares-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3fbe6a0139f93fe7eb3f20cb671d10dfb136b047d88376d204c1af7a02cdae1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ultra-altair-janus-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a5c9ad920673d1292343afd8eaafad8a8ebb75d99982e3a69f8c00258a4f85e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tailwindcss-playwright-lacerta-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1208ff45dd006a097793072c093d443a2de50d88981ecb93b4111e96b46ba2c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in supervisor-sirius-chromedriver-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b4341d925bc89fea46025829c726c45c0df2128b9cdbe42ab09851ce404f9a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147951 Malicious code in sirius-fornax-process-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad18cca3b1bc8f7e73a9387d862aa3db2328ae3d33cad98bab4d1abcc726e699 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140256 Malicious code in bunyan-sirius-nashira-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a80839ae4b1e9d6b67291153829fc2219acb1002afce7fc3726e1d9503d4a5a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...