MAL-2025-140907 Malicious code in command-ignite-ora-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0aadce1574a3d69fddbe0444e990e9999b4aebd9c2e59557f2f9802a0deed3ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145518 Malicious code in node-config-sadr-node-sass-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7a9531f78b9c6d8ced2fbe159fa6b011866cef7d09a1509b8ae0f2ffbf42f0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147329 Malicious code in resolvers-karma-leda-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45a7885561d4f9a15a76c0b8ccaa063112fd94b8899f912d7ab979e1f0bc78d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147830 Malicious code in semantic-release-janus-pyxis-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbf33b730729d4528a24e14f6d29c597a201ef03745edf8da5cc10dc413c4ada This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in karma-cordelia-private-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cabfd11c59e2f3ae98ce11ae4f0b511e6e6e016987d8dd0740070fc439c04b40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mensa-chalk-neptune-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f350c32b8471bb603135076ced6a8677a3340a0c907da9258101c78a84e7569 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yaml-foundation-antares-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0a67ec3a64d3a7650a12669ab6c5ae42927f3b82e08b118029fad105f67d844 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143465 Malicious code in hyperion-auth-concurrently-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 179c736d71883c669246ba5f27f7dbe695f4468b7bb6a97a7b35364a8a01c626 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146980 Malicious code in query-tethys-venus-geckodriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ec02aa4fb1d790afcdec3b12689719ff1d3ab28e2385cfd180f8af9977608cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144002 Malicious code in jsonp-nightmare-leda-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3fbe40f02d657a7917d90b09bc7249a176e5ee2697ec8b356d4d57be89d66fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145691 Malicious code in npm-standard-sagitta-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30e41ca778897239c3e5cf27fd5df06531d908fac9d45d23d17e3169fcf0ca97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141739 Malicious code in dotenv-parse-variables-yonder-flare-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49784ee3d9dd79f226089b8f80f8a69cdef17610770db6905ee6f5d95977d16a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143716 Malicious code in iota-configstore-sirius-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c89652821e865f568b1d8439feedbf080785e427885c6c6dd0d0cf76b0115d06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146226 Malicious code in pino-mongodb-query-kaus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60978187df58a76af8bf3bb453febdb1c26f374f6ca92ace9aab9eefbde3b201 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147340 Malicious code in rest-arcturus-io-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9d0b8686eed7092e318656016dd7a3307ce443b16ea6fab1ef179d685a0e7e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144661 Malicious code in magellan-sass-loader-hermes-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d16ff68d2dd7d1053bfa0409aff19e8eb4c277ed562bd9d6407f30d9ed4757ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148881 Malicious code in uglify-js-restart-delphinus-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ba0449c1680c050d72fdaf4e88e5538f499c761c28dea380cbf83fdd0af6d86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141000 Malicious code in concurrently-algol-express-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46a0058178b59b515a67b56d6ac529d010098fd03ede8aab04ae2f929cedc8e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147545 Malicious code in run-script-gulp-hydra-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0e525661601cb3fc186374bdbca0cc950bce19bad437d85caab9ae1e341396a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147057 Malicious code in react-bootstrap-enceladus-oauth-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3975364cd584979fb854f2c748200a3cfe076aa7bb4f0fa02f2739d144b73a20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...