MAL-2025-143524 Malicious code in ignite-puppeteer-sedna-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35174f4fc9f936f9c62e71fd6996be4ca74295263e938ba94323a36ce579ee12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145694 Malicious code in nuxtjs-apollo-gulp-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af6597f351418457f4a298e75a760f4998e77546742ce0037ebdfd07297dda10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147857 Malicious code in semantic-ui-test-test-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39408caea52c1551fa2c025eaa9dc9638438e19eda194e02ea83b610ac1c75e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145103 Malicious code in module-eslint-plugin-cypress-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73f039693e2b904889cb2dc213071e4df6db8ee5cb545b43a2e412144c961727 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146922 Malicious code in quark-colors-auth0-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33ba7f415d5cb37f209299599f124041b0707adad331912f2dfd0d7ca5470e4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146414 Malicious code in postcss-loader-winston-transport-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85ee82fc5bbb44b457adbfa013a4a759e5e0903d4a9c8be123b2c3e8ea262532 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148480 Malicious code in taurus-rocket-tailwindcss-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37e807b35ff747380871af9c1a0c9c793ec19b44283a142ca5794a2dc3a8219c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140046 Malicious code in blitz-hyperion-leda-supervisor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc31ae9cf161ca7962555f9633a5ace4c22399ad5c4806c8975a2c1802e17953 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147478 Malicious code in rocket-rocket-rate-limiter-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41e26082c9b904ba1de4516401a9a993d4862884ee2c98d0d8c7caf5a1f51ca2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143767 Malicious code in izar-virgo-library-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a584237b56eb540fa7a336cb2e55a1a35745b2e69f5dbaf4ea5b1ee12221ce9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146289 Malicious code in playwright-yonder-module-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b8a88d8d6c9de0dc9811395ffc27c01a2b4ffde660a8f412ebbeaa8db6930e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140941 Malicious code in commitizen-spawn-csv-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 216aa139732e8f8ebbeb9efa1d382e08a1049395c2a03bbfb6ae1873421a9b11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149080 Malicious code in ursa-winston-slides-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4b31dc58f491ff407cd1fd6390daa9fd901f10e866a4805223a569b09be8137 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148561 Malicious code in terser-webpack-plugin-yonder-venus-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f2b3d037e70244b804d90a4020e49f5d066dff3fbba1539e907521aa5f8baf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140552 Malicious code in centaurus-rimraf-install-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a20fc42722644aab92bd2ddc6bca3420470cac4cf0326c16962a9a81849fad0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145613 Malicious code in non-blocking-lacerta-halley-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5a8fa6827ac9e19e9e0a00af75cdcff500e2b579e6e078c205cf56c3bcbc808 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141622 Malicious code in development-ini-start-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4617475d964864836f5e94abaf991f558e3dedca1e65661637a22c5cb9e884be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145425 Malicious code in nextjs-react-bootstrap-dependencies-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b353beecfdeb4819086c6f961d70183613dc65b776ff461dbf29613f8ab84a19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147488 Malicious code in rollup-atlas-electron-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db2af1ee5d3e4992b88a68bb2875b0a18c7257ad9df640d557993353350d1d85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145180 Malicious code in morgan-less-loader-fusion-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8575a4ca4960c96b483a3c6d8f996eddabce2d7a28def93fc327e168cc7a1b22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...