MAL-2025-147276 Malicious code in repository-optimize-css-assets-webpack-plugin-comet-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae2b8aaee7f9fe3275d75af04e4b41551c3b458a7c59abf6aaf958977f5d449f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145079 Malicious code in mocha-grus-got-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c36b6e24fc8178b65effbb4ae34a0be0cb6e94187b3d59c3ba2366347635e54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141233 Malicious code in cressida-gatsby-sirius-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7b83efbcd56bb732cfdce5581fabde7d9d497bed014322bbefdcb77db4b1d29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144628 Malicious code in magellan-concurrently-markdown-less (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9abaa4ad316f22936dd5b88b8155e088efef33268c84c604f46a073977c2b2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144061 Malicious code in jupiter-prettier-cordelia-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b886be6cfeb6e0619d727153027914278c6a48c657e5309135b6aa4cce85e85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140949 Malicious code in commitizen-vuepress-slides-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05d3349dbf2aa8e6026d62f70d94138d5d47c305bdbdb57b61d4923f1ccd53d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144916 Malicious code in meteor-iota-xanadu-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 575355204cf2d8533897eda0e081bd9259ae4c69d20cf2c31ede843fd5cf5beb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148602 Malicious code in testcafe-rollup-plugin-corvus-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12fddcde5015e0fe42d0e3748a46c260942439e93f59eb180f802176af209eac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146813 Malicious code in publish-shelljs-hexo-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca528f5126e9c24a6c62f286d8690488cb572f3f41632364e361ae06bedbaaa9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145761 Malicious code in octans-apollo-google-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49f8cf1a29aa8d3f79169df6417c3756d4d86cee205262bb3c9db4961245240b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149480 Malicious code in winston-blaze-convict-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9405a26bbb3c5e2d9aa7aa5ddcb59c8ca86b807d28d65fb2f0a57974e0bc26b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144084 Malicious code in jwt-readable-registry-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8c86501e2f58efc803186834683b364f56012e35a6fb3c032119c54a19107c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in install-bellatrix-firebase-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8b752ffb2acce4c9001188ca2eabe54ec54f0e1d4c39be203e5b4cb7260b9c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149378 Malicious code in webdriverio-nightwatch-sequelize-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 641664710fffd6ee624b0eb48165494b9d88e2bf41886b18ff51285c84b58123 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149580 Malicious code in writable-supervisor-proxima-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3bca4faabe3a42840c725348c122be30333d6195344c1bb22420ab73b6bea88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144338 Malicious code in less-miranda-rocket-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be89cfac1299964287ae5c23da35e42fa60b5f6efa38ee5baffed6a9235ab7f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139464 Malicious code in antd-postgres-eleventy-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc23735b38462702c28044f1ca9863adc5a4e093748b364fc45cfe6ff8c2caf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147248 Malicious code in remark-janus-socketio-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da9e00c3b387e0d4c24f5c5bbfa1bb719d4839b704ca295d7767ad124b27dd0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145121 Malicious code in mongodb-cosmiconfig-impulse-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16aedde5124299a67704ac06f0b0969657a4ac78522a0130621fa3344d627407 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148583 Malicious code in test-sirius-gatsby-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aeaf14e6e10cbe5a3b607dee0e7b57551519225a5dc3ef21ead34231d78cbdd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...