MAL-2025-145864 Malicious code in optimize-css-assets-webpack-plugin-lint-redis-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a0637961794bd6bed51e0052831dca6497cbd5dc4bf9819df4587d8c1fe9e06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142080 Malicious code in envconfig-nconf-magellan-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea277790b8fe234a34902417fcb515d38b383e722e56e1480996b8af1e9c197d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141729 Malicious code in dotenv-parse-variables-ora-aquarius-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ff8e83bb1b3ab4c34714f6ba9d7921da13616d537496b69657f53bf7cb62eb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142679 Malicious code in framework-dynamo-react-bootstrap-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de049a6db6a95c67a2bc0734868704264651f3b278204b15e772e2e7561182d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jasmine-quito-lint-vulcan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22e3ba43d0877d7582fc2289f6dea6ed0681e495e93c77c1aeb965181bff1279 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in standard-style-loader-flare-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f9ab2321a1d8bba1e68a004f01d1aa6a51d88faeedf9b2d448f214e64125d8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in build-loopback-transform-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 924ddf85d741db918c5a6d6ebd1936d82c9d9258cac2248b333c3e1ff227ed44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hyperion-zenith-ganymede-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7682f9c0a6590a2ca4e15735a1a4c7dcc1c42a813ce4231957fd79e906f9317 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in axios-andromeda-dione-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab59a545a758f3f8ded31ec284cb9f47a3b3ca66dc254eb9f6cdd08d4c65ccb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoebe-mongodb-css-loader-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a00f85415c125221be192b7593c512d4ec86e74fba8dc5716204f0276c44d2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scorpius-xenon-ariel-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e1e4e38e52a8671395f4bc99d4b8fd899597b95008321a521a2a9351afdab05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriver-manager-dynamo-gridsome-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0bf1105a42fc22026cb6050057e501570d3e9fda22533d74d0daca090f4258f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in publish-sails-yildun-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4131be577a8fccfe05f69672359fd356876315139acb90829a87d84b5ab89f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140082 Malicious code in bootes-iota-sagitta-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b591b6fecf503c9168c2bfa57bb3c5d06274f8c76955b313a261d043f484f65c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143994 Malicious code in jsonp-configstore-janus-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6491a1ad6532064b4525dda0546ca266738df9e868bb54a32043160081b02742 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146429 Malicious code in postgres-canopus-supervisor-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd0ae963def08804b0e22002cdc6ddc6c066f05c1c505b3acf66c67b8716c8dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145855 Malicious code in ophiuchus-zenobia-passport-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0eca8c97cb6ac0779080fceb9527f7442614f57c2e63e5ddc7208cc5d617a013 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144303 Malicious code in leda-xerxes-farout-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0673ffb4856e4955334686e0e25921ea6b7a948d123da5b7e488cf720f135dc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148323 Malicious code in stream-lint-magellan-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcd7ba78ae6ff950c86e95dd3e3febac32c90c13ee98faa58fd9ae9d974af8cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143930 Malicious code in jest-pegasus-nightwatch-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80191c082be44691a67ad5ff841fed6a08ac9ffa96a49ed27afc0eb1c8dc50eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...