MAL-2025-145324 Malicious code in nconf-postcss-loader-gatsby-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a97ab5ec9166bbc220c9771d8d876188feaae7f798661cac66a8179005508ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148300 Malicious code in stop-package-phenomic-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dc099d38b27f19ea7c371913a1c7be9ca31b14fcc5d5c992ed20417fdc8eea1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146297 Malicious code in pm2-eleventy-google-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f51d1f7de0e0269af708961d18f2d108d52be80609f5536d347cfb63070de448 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144145 Malicious code in kaus-hapi-css-loader-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28e3895c78a71fd2ea5e6ab9db681efe43891f8ab1c3ea3f392a530f981768a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142596 Malicious code in fork-run-script-json-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a487508b75acecea952348bb04e9172b5b203a5e9a7c982696c74b83d7457b0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149178 Malicious code in vortex-antares-axios-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 496fdcd645392ce1ce737d33cd2884aa6941d8a60e4abc6055eabb6cb9fb6e18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140053 Malicious code in blitz-oberon-ophiuchus-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9506fb8af6e69d81cc9b390422e08b9924ca80b759806594dacfce64b3786012 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149547 Malicious code in wolf-dotenv-safe-init-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f276f80847acdf6e724ff67d80fb8c48fe61319092838a09349c533b099d4e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148477 Malicious code in taurus-postcss-carpo-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d25f14bee0e8f72fb8310de841e4a0e25703322b37012c06a27f037259587e88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147972 Malicious code in sirius-repository-yaml-oberon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95beddb139e3952dd262d123f7bac8e6fb2dcd0a25b82d6eea52b3c55bacdb52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149851 Malicious code in zenith-gacrux-tethys-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df7db5be699ef4ba8aeea257073baddc1b5f80270191b531880ceee13acc8a0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142980 Malicious code in got-izar-acamar-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03c2fd8fe47fbb26643f2f916acfececa96c9ebe4b2460bb04ff9de46201fd9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143637 Malicious code in init-yildun-proxima-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8e58e2ececc108f9c03ee9a1ddd205280467095f54af32d75cb204011dcb430 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141535 Malicious code in deneb-callback-terser-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 125befea8f472118838c92df441d309fd7c4676366f5a833ccedcb1cba6dd12b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148416 Malicious code in sync-build-koa-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb6cdd7c52d023e5b645b46311ddd666abaadf7439293f946d76fb73259ebc7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146722 Malicious code in proxima-luna-janus-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3485ed97ed5ee07ccb23c5e647638790ba3d17b125c77e378bdc54f224def390 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148618 Malicious code in tethys-fusion-wezen-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e832e31bf8f65236d9fb28ab0c595c876adf2c2de15de8445becee2f77a35ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140836 Malicious code in cluster-sync-development-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24ded04885cce013370c43c85d9b42e94e798f39aab69a13d49118a8fb5df4d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148276 Malicious code in start-mongoose-scripts-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9c8881d3331a199f19842e80240df5da41adea1181cadde5924c73d69f70e38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144681 Malicious code in markdown-bunyan-sass-loader-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e75ba6abae34bf7fff5d43af7c07946d458f794e386d3f8dccc26010f8bfd47a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...