MAL-2025-149217 Malicious code in vuetify-node-config-cressida-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 293161802f07c9de6661d6fe9613860acf582af0194c832439c21fcdf8700510 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148246 Malicious code in sqlite-yakutsk-lynx-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77b8b5a0c253c8e58cb6b450ec34b1b4da65da1afaadca90b314f6ee4c26df54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145610 Malicious code in non-blocking-hapi-less-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 075caf1674ff7e833f0bceb57dab4fd4abd685e881659c5f95b4ac57f926a0e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141095 Malicious code in cordelia-ceres-passport-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b61ddd43b0b5a9bbf637daacd7159288a1f95ab53514e330058ed7713051c4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141740 Malicious code in dotenv-parse-variables-yonder-readable-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68837fe0836c5968bcf8de92ad6a85b333115663a6f25cfc16a82fd36ea7c5e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142604 Malicious code in fornax-adonis-odin-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1057fa9aa80b77472c8729ad36c4948d1d200c0d3c2f3786e76cdf47a9a791b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144946 Malicious code in middleware-antares-graphql-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e67ae35d50289396092b8b9b4f7526ebbf1bc4af417a1c237436cfc78ef362e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146253 Malicious code in pino-spica-leda-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c8cecac1c1179d9823b5417fb59873c0562de62cc50e700c3015893a3f59ae9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in configstore-semantic-ui-iota-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 522661629c144c726922f88e7442ab71fcbffc91daa5a123695bf5248c25ebed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141060 Malicious code in configstore-prettier-css-loader-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb9b61611b12beafaab6b312ac0c7e46444736a1d2d38ba6ca30138be65e83ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145747 Malicious code in oberon-io-thuban-draco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91e81b30691489bb6dc1477cfaf24ce6eb3eeecd6f57a6188f5d9eeb9365266f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139172 Malicious code in acamar-dagda-canopus-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f77f13b3a7f9e9e576d7e42f24d4d463de5af216c31245b4cecd87f52d7ba10d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143910 Malicious code in jekyll-nodemon-lint-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97eed5e8ff22cc9239cffa973753ab2ed9b0ef01e31a43a734b87a8a922d04e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139996 Malicious code in betelgeuse-ophiuchus-html-webpack-plugin-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee8a7d41267a9cdde6b8ba5d659fbe45a5fccddd9ef331442f4283e3558b4406 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142090 Malicious code in epimetheus-apollo-commitlint-config-angular-relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0da73a2148d09e8d12fc54a7f894411b1f1f805497bc1d98cacc8c61e64adf08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142668 Malicious code in foundation-blaze-airbnb-helmet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38969f667ef862cafbec8067822a7b84c1f7bfce91e5eba9a51ce5e997bfbe22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141501 Malicious code in deimos-mdx-publish-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 191cae5a5020a0919ae5a62e6668e0bc50d53f30c98d7c2746f1d3d86bee39fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142309 Malicious code in event-deimos-mini-css-extract-plugin-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10ae3339de31987245b0464e66994d4f5c09550d0710bd98c8ce08bb3c24c76d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145876 Malicious code in ora-altair-vega-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28f60281db13309d62314a0a9e16f3912bee556a7237b902eeda43ba95885397 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145166 Malicious code in mongoose-ursa-csrf-pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff09a0e2775c3f104292df18673f57ff3a4052c29debe9466012a0994d4cbbc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...