MAL-2025-139932 Malicious code in bellatrix-cosmos-pulsar-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81d5121b16540457738a85a3847605438e554246e5eb1c5f9b09f1a9ed821287 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140391 Malicious code in capella-materialize-uglify-js-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 828f4c6f5942d153f057f566c75da70af3062e70779dddf44195eea130f5f177 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139219 Malicious code in adonis-virgo-cordelia-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e07b7ec5a3ebdcdcfced2c14aa60be59406831219a126661a9b616532b03b04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141841 Malicious code in dynamo-ursa-soap-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c42154cb3d3d4f013e199a8286637184259cc713fcc3019d47b1fba096b9e6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140827 Malicious code in cluster-gemini-jekyll-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5048745286b07cf1af85ce48d381d6c247e7e07dbcb4b62a9ef60a15e18de9f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145628 Malicious code in non-blocking-tailwindcss-virgo-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9edb149950bc1f8e57d253ad39963008d2ce31b5502a98f0012b06b0e1b765f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143044 Malicious code in gridsome-hapi-comet-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8cd3cac8edaa9ec5304601d2065302dc6a788f5a38d89ce31ff3053d2f348b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142771 Malicious code in gacrux-html-webpack-plugin-fornax-impulse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b07fc0dd36ac2f8b8534fb761509e2d3361c8dd79267eae5cff266a8cc38ef5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141336 Malicious code in css-minimizer-webpack-plugin-winston-jovian-sadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f2377b89cfa09173cfdb70d2af5d8ea58651dc25da2a59b66e5e8da09eddb6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146600 Malicious code in procyon-kastra-adonis-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9a0da189071d0848cf5f16588875e2674d7f21e1186a66a3cd2bdfb05a1322c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148270 Malicious code in start-fornax-cosmos-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17faf8d360e6c0bbb43bfec05c64b4a0c07b45a477bdb0877c1fc4560e6650d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prettier-nuxtjs-metalsmith-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc0530eb1ad39700c42120f582e87d6140918e039de76026941107c4042d0a81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oauth-barnard-resolvers-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea66277b18e096e1d2a0d7d62b31f94cb16b2d90a1da10ff12c28b7a3942e44d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144769 Malicious code in mdx-markdown-pdf-andromeda-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a929f851587f1d3c868fb0aec364a24cfc338af4c53ac9f28a5368f884487eee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148533 Malicious code in terser-private-element-ui-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5256a58de5656427ce43274a191ffc9eef82d97edfae23fa63c7f134e0113a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143627 Malicious code in init-nestjs-loopback-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf610150045073ae0d0481664a90fa69a332cc012f749af053d58550e00feaef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149207 Malicious code in vuetify-dotenv-safe-spectron-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e72b52b005ac79b24237f34f7b4a002e4d2e110209c57ab77354a8a1dc6aaf4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147273 Malicious code in repository-mdx-init-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1a54f154ee893d7c612bccc459d3b27c420ea729fdc420864cca5b527a96b66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148178 Malicious code in spica-rocket-css-minimizer-webpack-plugin-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3da0c09aa3a47b37c6fa3e23aa49e0f10af52ec0d0925b725afbb6e89ba5d70b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141024 Malicious code in config-ganymede-hugo-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 972c4937b0a1a11715489b02260c4d19fd928a94e7a408ded4575366da6e0fb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...