MAL-2025-144675 Malicious code in magellan-webpack-global-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 545c5ada6135a1efd8ee85d3182f24385c34b4d5d449063bfdced4cdb058754b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142904 Malicious code in gemini-mini-css-extract-plugin-style-loader-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55dbacc8fc1bfa1a561e8f8fae3f0884f286af2d6425eb54e8131852deba7f28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143413 Malicious code in husky-cli-axios-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3e3ac914740a1f8e6ac85c3136819adc22fbba0178c57d910ad1afc930d0768 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144452 Malicious code in lint-staged-delphinus-typeorm-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4156dbe424c31b0b557485d7425baa456b1b7b461c9d9db75319dda86b377161 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142137 Malicious code in equinox-terser-webpack-plugin-dione-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b5d0a52fb179fed091ca0bfd6b0a8636b4182eb536376574927473e64771fde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in capella-aether-hugo-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5114b87d35b47d073d6ed470df9f820bdb04e3a4dfb72dc3c23d035f79c27096 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141589 Malicious code in dependencies-wasat-eslint-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 156cd86e2d601b460757239dcc8be2e53759330ea90b0ff0ebce92acaa767702 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in solis-ultra-electron-builder-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63d0816aaa7760bcc5127fb6d61c65977c0490633b576a152b843d3edcf79c8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitlint-got-graphql-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba0e5b4a97cfce89e6a9b2a47f4c4ad3400f6d303f0c4361be1512f951a1c88d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jwt-telesto-bootstrap-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e8e9921872e0584a4359c709971f101c91881e4b879963244f8b683d3c58d81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eris-hermes-nextjs-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d78ef202fede5425a153b911768f8232a8ba154b1acff3998b72b75a604f20c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chakra-ui-gravity-mini-css-extract-plugin-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7d0b71d1eacddb260155bb4fac850e0b16be612054cb740d5d819377a0662bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dependencies-neptune-update-supervisor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 397b34418700a7519cb7464e8e06f7903ea7fc035617ff240992e51e6953896e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bunyan-spectron-webdriver-levels-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59afb146d54e37d45ee9758db697a52bdfbf02c0221da29a86c0a21320fc2a31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proxima-enceladus-passport-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb8600d80a5e72e3449fb03483c9e38e7860062aad43b05895d923cbe105018a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ora-markdown-janus-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8b7bd4b1c1d39a7f7495b0a9cf4b4e469251a3c28e38498d153c59c70b92a32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in configstore-titan-spica-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47d4323dfe5c95c01f1b85cbb867e70a807bdfd1bf229b6f11b8e1feca94fae0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in markdownlint-algol-chai-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11cac21b59d57f39403b3152a77369e8dc1a301daf2eac4c4931b9a68807b037 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sagitta-xenon-chariklo-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2ed567406ad5a8211787995ba5481b7eadb7b526a75d40ee56105a29adc3752 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in postcss-loader-telesto-vulcan-phenomic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2d032771765afdffab124f10a56de31b135824b7fdd9e795e2ba150faca6d14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...