MAL-2025-146662 Malicious code in prompts-dotenv-safe-meteor-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1efad6a2acd2fb00980910c0d99b6e947d7f3600072912f8b770551b9a22bf90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mira-aurora-jekyll-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c37198abfa595ebad14a4918dff72d195729333be2f1385ab33554a1a5bbf5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148725 Malicious code in toml-version-docusaurus-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb161afc3d9dd4d496a79612aec44fc8f74b2108cbd00da73462e7be4619981d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139716 Malicious code in auth-await-vortex-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd8e71b70cfd7083ba4ab77611a35180bc9e213d9cbc366918b93d2ba4598fd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chakra-ui-semantic-ui-query-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 772e26511ca75d4e3293ea2926cbb7404b0e62d26f1a7aee402169932f39d916 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145571 Malicious code in nodejs-miranda-socketio-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eec621e6726eab4c97228945d899750c0f1ad4ebfd72f119c1b2c51100b87228 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147436 Malicious code in rigel-module-ariel-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5430b6080ec3b26d7c4d27ebfc869276db25cfcba262c4909bdcdd3fc72261c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148932 Malicious code in umbra-phenomic-electron-builder-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 424a9fc94db72e7f5a82ed92d95569357de700a247032fc96f8cdd8b81ec290d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149284 Malicious code in wasat-css-minimizer-webpack-plugin-grus-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5bc4d6d32a3ad2bf2da3f04d696481a91223c21f09d5bf439ab6b67546f3d8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139309 Malicious code in algol-semantic-release-umbriel-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e08dfaf5755158a631fad64ba2d043d77d0d37c5477fc005c7b66578499f9c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140231 Malicious code in bulma-umbra-jwt-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4b1e107a01795cb4e0333a5cd37929bfa63193200bef0f27be1199d84640f70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149822 Malicious code in yildun-rehype-javascript-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd7450993f2ee006c4a6d5bd8bc981fba7295d59c3471a8aabaecaeb1fe49589 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parcel-apollo-framework-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cea42becba6a089bebabca0dc3b4529b470bb588c4ad13b4ebd10402cbc0a618 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carpo-barnard-tethys-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b3e6e2cbdfce1f99dac07c16e06635150adaf3cacb4524c51c4c46c8ab07e22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xanthus-koa-cross-env-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 873d88c3509404f2988cf91d1771157fbd0b4779809b331cd37a8c05f53e5239 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thuban-rollup-plugin-chariklo-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cc146fbdfc420e6edf55add804abf5db01e4546ae4b3d20978b40a12d156f87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cosmos-postcss-loader-iota-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 761b189a4162df26d5290b5c7b6135a292988ba9144bdf0b3d530d206cab2cd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in readable-nodemon-envconfig-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b669250f4fcebdbadf124c20bc3e4dceb6d196ae3e3ed41e89b7c18078c0ac43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in config-sync-stream-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 272ae80d612727261195a18032ef87b80a908a41c49a641ecef28bc5ce12b63b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in csv-luna-loglevel-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39de5868daf7a7800d0aa668da6d9fb3265e2f881ca7e315c902452e2cea6df7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...