MAL-2025-147441 Malicious code in rigel-tailwindcss-electron-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b77df21c4788f9beed086cb88985b131d710bcd6382aa8167fedc0aac70f5366 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141293 Malicious code in csrf-postcss-dependencies-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e323392ca38cfedc4da56f983f855457eb4db40ebfc12a16fcb2918fafdef571 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141444 Malicious code in dactyl-inquirer-version-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8252b1269cc558b534e0319a0675c490082867e8a797591156fe834d3f1d7aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146910 Malicious code in quantum-mysql-schema-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa1540831b0f95580f1e8db066bb4dfe5d00d24bd0b84256d15212a601e95c79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144343 Malicious code in less-protractor-nebula-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9408abe13d23077284ee2775377bab10375093115e0c5e9a2cc15760187cd65d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145869 Malicious code in optimize-css-assets-webpack-plugin-regulus-vulcan-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c07d2b8b61c7ab9e326b8192138231dad82b035a739b9196b7f208ca7b97637f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147345 Malicious code in rest-docusaurus-xanthus-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b51475e0d0ca1aa3b5682e8e921a79c3fd824d58ffda5d2a89baa2069c373a7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148006 Malicious code in slidev-io-bellatrix-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96d0d4992318581ef24ab6d35f823720615179955fd0c5aff8c9e63aae72f5d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141343 Malicious code in csv-cors-sadr-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0530075e6b1e45faedcc08afe86303c56c19cf2b046d0fa3f42018e2fa10b1e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140258 Malicious code in bunyan-umbriel-relay-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44f3f063c2281fff1e1b70c86da2fc195585d3c059d7911720de2e6ad6746f90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141309 Malicious code in css-loader-octans-acamar-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b5a0eb27ce8f5a2dfcaca555b902c33e0adef4bc2fe29a0608fab6b0b3a2244 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in csv-subscription-apollo-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41d87b5a1516b2518c854fa644e90a91b1a468ffd9573c8e3afdc5a5b68de7c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147909 Malicious code in shelljs-bootes-regulus-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bea1d60a341ee060fd308c857d380e387103b67657fcb6ba02d846cc3f73d1ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147073 Malicious code in react-bootstrap-rocket-async-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6eed4998bf00e59d674933b76fbf9a1a5c4a158d6c5f0892cc4c658ac9d96f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146894 Malicious code in pyxis-webdriver-manager-selenium-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dd635838c8a3e29ed758fb816df1aae5113f58d4136c3bc38d13731170c1aa8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146403 Malicious code in postcss-loader-npm-child-process-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2baa6ea4e8409b7545bd6962018674d00a779c56899d8c1f5ab8aa47645dc2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147669 Malicious code in sass-loader-gravity-draco-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d0d8a65fc724223d4447a7e5edeb4e86f4caf1d3c491101f9560c8b5752539d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cygnus-pm2-husky-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e756a78cd162e580971123f972f39376761844b3120bd48a3baf9df5460a8747 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slides-selenium-middleware-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a839aba4aed4b0d37e305b5c204ba8183b86802e74bb12ee1bc3b351553e51e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cosmiconfig-hexo-blitz-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44be45fdde61cdce0f1f9666eb2a13f985e7e09710708a60db96f21303c6011c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...