MAL-2025-144649 Malicious code in magellan-middleware-protractor-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 930bcf903d4874e22b6b79a00b1cc2c3a1fbb30b21d8d457777e38c1fb17f539 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143019 Malicious code in gravity-centauri-docusaurus-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4c6888c4ce290373de142d4cf67f685e39935cd011f692270694a1c042724e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144746 Malicious code in materialize-materialize-mini-css-extract-plugin-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bd756c9249743cd040cd2ea865ff064a8e93249f95f6c5a86941b003c255727 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139386 Malicious code in andromeda-toml-norma-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b25fe696f1278a9019e467586cc3593dbe3da702993f1657696c7200984b89c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142105 Malicious code in epimetheus-regulus-sass-loader-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4ee18d4709d88ba8bd65ce29f6d0c2c42a6ec04ffd410f7c61eb189f5442f80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148242 Malicious code in sqlite-transform-jest-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4edbfb4264847c384da631ea6bc0589e5e25634a72695e65abc456edddc215b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143036 Malicious code in gridsome-css-minimizer-webpack-plugin-graphql-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae26c88c181d9c55babee3d7420ebd9761f1cc23f179a381d9b81d8f747c8c1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142577 Malicious code in forever-webdriver-mocha-testcafe-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad97be0264b0bb5094af68aea6b2b3948642428c9ca9efd84ddf15d7ab02acfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147048 Malicious code in rate-limiter-soap-colors-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d26fcbb86fac321c2a89996c3d3a5ecbae4265c62ca42ef3fb425c829669460 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pegasus-spectron-jupiter-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91bfa4b5df1c46dd1bfc2e3815bfe4db8d08c1fe68806f1e59c00c752993757a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in helmet-miranda-halley-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a89d6ca7cce0fd80ab186246ce104178ed46869da529802ed81183e32b0ab323 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143654 Malicious code in inquirer-pm2-graphql-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 964a75711a342b3eb5fc2ab4d78f2cf2af03901b2758dbe99095253d8708e938 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141163 Malicious code in corvus-perseus-chariklo-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a32839493716ccf5866966fc2c0c28d2135ef1a738aaac9f3df7a8bb551e8de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142721 Malicious code in fusion-aquarius-mui-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc5a48949c69a045ee791279a04c56a2f449b7a11d0948500b5f1c1dedefea70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139555 Malicious code in aquarius-ultra-grus-yildun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca227366db798cd1a92449b775f7cea1d9418456b2ff3a5363a2787a3c9a67e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144390 Malicious code in library-thuban-galaxy-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3662286e5cc98f31fa21e440791aa479d49ef39b59c4043f6bc39600a6eb144 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144801 Malicious code in meissa-css-minimizer-webpack-plugin-kinetic-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd3e37d1cf32921aa706fc4ffd97c8fe9ad694e5c8c7a37d55e39241b81f6b39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144779 Malicious code in mdx-sirius-buffer-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 264cb34d314b13266791985fb1072db94210b9a991abcad1984a90978870dc70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140714 Malicious code in chariklo-spectron-corvus-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4d78c278ecff4ebaff38abca456c02346ef98a651fbad21ad8f688104cf4822 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144643 Malicious code in magellan-karma-barnard-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e688dc4b727f9d3b19915afd16b27657a3e39c2f63118c5d13e778f5826283d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...