MAL-2025-140342 Malicious code in callisto-miranda-commitlint-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b34dc3e8dd56356d3f11ca37b5a7ea84a6f80b94cc36ced66471e8b1b501997 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148559 Malicious code in terser-webpack-plugin-prettier-antares-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd843ac6dced51f98acdcc930c20f0cad711abc9b239c360b831e0741fb4a329 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139910 Malicious code in barnard-kastra-carina-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5a9b9022db9904dea51faa330c3c795af208d00d11dfce04befa8c3d077b662 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140739 Malicious code in charon-wasat-octans-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bd37a599738ca614b0f898d028c4734a08455a66fdabfb731354e0ffa6ecab6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145386 Malicious code in neptune-unuk-fornax-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 873c6d5647614d7f40eea38f0fe82b134d0919e794148e573a07e750253968f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144981 Malicious code in mini-css-extract-plugin-meteor-private-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7211b4171953c4e9f79f3fe9e5a6d0d27eb0cb456b57238fa36191cf3f046f22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146665 Malicious code in prompts-jekyll-vortex-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44add37c584676603eebcdad6641eb3d7bc89aed3f796216a360a469f27af9cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143315 Malicious code in hermes-development-virgo-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b9ebfa206b435c81a56d67d919dc4e28ddfda901b05abe2419b067e8de16f38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142014 Malicious code in eleventy-ursa-vuetify-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7987d7d8b1c60f443936cd644f623d6cc0bc3c2008d2b2da8261c0eef9d19b23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146558 Malicious code in process-mysql-cosmiconfig-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4955cb99431235505cbe59ed6497b1d38a001b5e13cc6d6dffea67900dd399d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148190 Malicious code in spinner-dagda-xml-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f0290c84ba80b9e759f0e940702c39f74b6b346365cbb80b29af041a06932ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145735 Malicious code in oauth-jsonp-figures-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8a6fc5daa675afd58f702aaa8ddb9c7219d1acfc6d3c64845b81303a29c9247 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146606 Malicious code in procyon-mongoose-meteor-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a6f06f34d61e17c30e370b3cd08343aed4d0f6b607db2ca3213a5a7459d1512 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148157 Malicious code in spica-convict-got-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 261b1cb8052913262bc8815e670f43ee36c2614297a654421d573ac65aecfe7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149301 Malicious code in wasat-sadr-iota-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35975bf3ca8a3a235bc037354b66f796b3253ef2eb41b0b9ac029c56e4cc74ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pulsar-run-script-redis-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e468e8345155c6e22043a1a762bd73d53b966d686db21505c6709bb62b81bbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in acamar-centauri-izar-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a65dcb67a04bce7b3e85b8d8f65260f06ca2912a4141e61cf48c2c0ad51ea95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fetch-socketio-cosmiconfig-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b66b5bd3a3884e56eb328697e599b1fe4d7b8ef780cba66f461c63cb2cac129 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriverio-terser-webpack-plugin-optimize-css-assets-webpack-plugin-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 691578a3e3f39189b4005a3515a70fa7106475aa007895da92a8cc0a0ccba662 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shelljs-chai-remark-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39bf01b624bd21b9a8a7cc6878f307cb778c3422e7632f710831cf26d0364bd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...