MAL-2025-143373 Malicious code in html-webpack-plugin-sync-perseus-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d54e21caa1696cf3cef247fe0d1e27b9dc0c37818e8ab73e05d4850ef300030 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145705 Malicious code in nuxtjs-grus-heka-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aabd30743192b5db4cf889cca1641cc79c387fa9213807598d2977d5bc2769a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144876 Malicious code in metalsmith-elektra-fetch-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70ad4825d26657e1d808e320ba35d6115608876599dc6bf3bba69bae9ba3c742 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144954 Malicious code in middleware-elektra-webdriver-manager-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91fa4a752b1115950ffa2e6d7e6822d1f9b2148ef8084e6635d365390d004fb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145149 Malicious code in mongoose-colors-private-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2016b08d398ea500476ae7f3915149632d7a439309de048e028ac5181209428f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148797 Malicious code in transport-postgres-slidev-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38d1df68b6c3a3deed16b7ba403f00479cb352e025b7e61894e351acaafe0136 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148478 Malicious code in taurus-release-it-sadr-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4ff411da84f3751381a5af5ff44c207ce3708e666554d56c0838d8ba1d25764 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139780 Malicious code in avior-quantum-quito-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 075ce8326864624245be5fb57fbf1901c47da14a12275f3443eda7cfc7e146ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140519 Malicious code in celeste-pavo-sagitta-development (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 843f2c4b1603c2df6ce963cf271709d299c53464b9cb23dc1b53e9310420c00e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149134 Malicious code in version-firebase-yildun-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 959ec43cd51cc37556f973164ffeb7c974359d75dc1141f1635b2777a1b8a03e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144587 Malicious code in luna-umbra-chalk-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e6e8f25fefa4b6969ded389ac1cd313816816b4fca0814c10659984ec3170e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140679 Malicious code in changelog-protractor-bunyan-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5c8d924d423f039c7a3fe6145082b38e7501a3ff931d7a0e79bce1d9b18c274 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142468 Malicious code in figures-halley-cygnus-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5bfdd47cd57e9ec30a9e0daefae6dced0d48b8bcdec9c70ebcd41b4bf6f3247 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139605 Malicious code in astro-geckodriver-janus-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e1a9ef40f2dc1f3f3e83e487e13afb347652dd20a7c8940dbb595234eb2acd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139853 Malicious code in babel-development-jabbah-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4633fb1131d4ee30b5d86906777a04819c33d351f67befb19c8d6a18c2caace This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140684 Malicious code in changelog-slides-update-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b821ce07d8e9dcb843859974063b10280997900b48d7779d021b1192131a7ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149259 Malicious code in vulcan-vortex-soap-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 167edaa616eab6481ec791de4d0adf51b73b0d4cbb0df8373c2d1a10d01b7f4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144264 Malicious code in leda-convict-commitizen-cassini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fed8d2bd7bc5314ec5274d837a577d0e748ae44450cc9db11d1fb8e7a98b1224 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149276 Malicious code in warp-ursa-kastra-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b98d11f27a0a6ade7b53275ff1860902cdfd84ce6a16f09337ebb7895eb0160 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144223 Malicious code in kronos-odin-husky-impulse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a22743875e5744cc8a70917be29c9b2a3057d3afec2c9f87c65bd78d07c960d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...