MAL-2025-142478 Malicious code in figures-postgres-tailwindcss-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ddba4bd4bfff12e648a4581a1488a5f2375d47369a591a774a8958438c79459 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141372 Malicious code in cygnus-karma-prettier-plugin-markdown-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a6faf87213f3896d4b91f618bac8a5f8c5bd2a42cc97da78fe28bb81fa36027 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in markdownlint-phoebe-aquarius-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97bc05a74a579980324723e78032930d587d6d67a1b120c30a59e228eeb4a720 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145438 Malicious code in nightmare-indus-nodejs-xenos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04fd1cc37d46f1a1f057268f80ac023e3523d32064151e456dbf016869d8c97d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149281 Malicious code in wasat-buffer-karma-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab517f07a17bafd85f8d3108a9ecec9aabd164231fb17393495b08a4f786a465 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146649 Malicious code in promise-rollup-miranda-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e81746e72d8a1587e17b3860845b2296f7c314699720c015d7dcf8b67504630 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140159 Malicious code in buffer-hapi-rigel-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 234a847915fb916fc1124bffbe53d55bdd12c690cd1d599a343da90e19e60111 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147184 Malicious code in rehype-slides-vuetify-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dd9b526d0706b2613962f6026d8f4dd893e249122ec8cf8be17968a7e91db25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144529 Malicious code in loop-mensa-xml-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 588fd6e066e2dd3092837d1df974d64a5ad7b55e0b95e3888d7853b746fbb1dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141320 Malicious code in css-minimizer-webpack-plugin-babel-shelljs-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4845b9a3bc9b0f42f3b7cd20d841b772cf37a58a4b4cd85d760de5154291b3e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139626 Malicious code in async-hugo-yaml-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08c0e1b1c15e19a880c6cb5a4a289493b09db9ef6d668639e8e3419b0c1d2333 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141053 Malicious code in configstore-gacrux-centauri-cassini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9eecddad5b8e9830d466797504e91137375517c27718cfcf77fe4bf9edea0ecf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145655 Malicious code in nova-configstore-envconfig-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4ce7ba149dfab81053af19e5fda3cd4e6ef2373a58b40e024f4b6e06cd32a76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144263 Malicious code in leda-configstore-fornax-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f7525e7a35862c20e4b39dbbe250f0d19fa5b731508ee0a7efd7eca820fa61b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146800 Malicious code in publish-phenomic-phenomic-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a89ad163831682a4f9c393633188ef89b0371d75e58767e815d7e03d8bec4ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146777 Malicious code in publish-carina-centauri-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1c07122800749f613dd46f580699227bc1e00d0069027dc2215f340c2bb00f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149694 Malicious code in xenos-weywot-yonder-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 459589f2935fbcead2d7f29e5333332fd8f5e7a26cb0459b689682edf05048f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149619 Malicious code in xanthus-build-development-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a806dd95a5e6b3269527ab019eececbf5dbde8ce953c2f0a04ea6db7460bb15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148421 Malicious code in sync-deimos-cache-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c70a4f27a43e6b5e2f1728c8fc953fd87116e2317c06437a656d559d75fa0bff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143879 Malicious code in javascript-indus-ceres-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 183d484945bde92944532e2b9af5c200b70e70bcd5879553d78a8deb2da8f18e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...