MAL-2025-147645 Malicious code in sails-dotenv-safe-centaurus-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66161950d798694a8d3a460e3a9c61d935e3555d346a161be2e76abebb5681ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142919 Malicious code in gemini-websockets-pino-pretty-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6200ea4c861043caff0367692838a45658c6405477752eedfc75c3d36d1416b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139639 Malicious code in async-yonder-node-sass-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b951433d2aa9d6be0e893074510f1cdfccaeea107a57ae55eae5f9fb22f25b1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146956 Malicious code in quasar-neptune-bootstrap-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35c2d4a25ad02834502ae95a15e19af60e3ba226b2f42f69864e199afd47cc67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140701 Malicious code in chariklo-jest-titan-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4f4fa5e2efa6b267cf81c7911f6cc457036256039097ea7f0efc376e5585f15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145531 Malicious code in node-sass-cli-phenomic-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bb981119709dcf33d9522500fcd9166fbfa538a24b7754e164370e13c45cc82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149317 Malicious code in webdriver-manager-eslint-plugin-stream-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 375e9010bc941f62a7a27223a5b5bf6a50bcbe8fc6791230809991387993d537 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147282 Malicious code in repository-spinner-chakra-ui-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f5d6ff44adfbda00083afafb7a914f82cfde22c313e5d1f336400d9ce82b78f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143200 Malicious code in heka-apex-firebase-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f41f0381091ae082e9458edd8f1ec765ed4a9a451424985ffabe6a53d08441cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139872 Malicious code in babel-rehype-mini-css-extract-plugin-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a1fc500675fae07b9a876c104374b27b82820a5d8bcfaad02b275aa0426a718 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149291 Malicious code in wasat-iota-juno-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e184d050ff2e9e3a46885eb00f8bdafee0f685ddea7afe8c725355e094ca31ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146952 Malicious code in quasar-janus-nightwatch-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35e0d21c5ebe18126909d8f13503d3cd2e944beb10bcf2c5888bf01546bfbfc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145026 Malicious code in miranda-config-odin-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4a68ff1ed630d807e3bbbabbe5a34ff698f471826af4bab49a10070e6b40639 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149445 Malicious code in weywot-remark-titan-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44b91250cf24f7949b14f40c0c24691e6116caa06fea0b5b25539c3f519bd116 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146781 Malicious code in publish-css-minimizer-webpack-plugin-nuxtjs-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f61de6bef5b68ba25979e912b33bb3e86106a2d722106557cfc8f1fba1d53246 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139317 Malicious code in alphard-auth0-webdriverio-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6859770119a4e78a30f5f48c4be3a5d007b88f48d81094e3471b635972c0f46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143433 Malicious code in husky-xml-kastra-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7f9c2bf1b1dde395f39bfb95800a0f14b8fd95f06ea2bbcea41cf3fddbcc839 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142433 Malicious code in fetch-bellatrix-celeste-jwt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9751a8f461ef75356eddf22513134bd4061a94b1facba3c6c921a8f816a09c8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139327 Malicious code in alphard-indus-nconf-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e761246ffc63d2bb32ee5f52d1719cdb8e4c275432d80320214bb2ec3ae42693 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142317 Malicious code in event-mutation-commitizen-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71b32949794d833bd6fd57a5723e080406ca3e2764c0bd31238063217658db91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...