MAL-2025-145193 Malicious code in mui-altair-winston-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ec698e61543ad380ee240f73da03f38591755503d7151b0f7073d3b8db12176 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147790 Malicious code in sedna-regulus-iota-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8b8ec49fe6c4fab613bdf976a420affd1bf19ba986d1757efa996391dabf75f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139617 Malicious code in astro-request-sequelize-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d0615cdf2e022eb8e309a233fa7d06b1ed30941236bf8c92a29027db49a27c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148985 Malicious code in unuk-schema-cross-env-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a284a163b533011f80b6796a04ffc656782019c6c3bff8d63b9b8bf081c1baa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141442 Malicious code in dactyl-foundation-deneb-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45c702b6dd34c82f1f31c9bb8c48269dab9e7a0d5f55905e6e7726ee273f67b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146385 Malicious code in postcss-cz-conventional-changelog-nova-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43a47ad08ff76838aba861fc6bd56d941e16c5920f34a1d97c32b77c103ee738 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143210 Malicious code in heka-ophiuchus-cache-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04a88089822f8c73b5b0395551f87a7a085394fb6497c4c9d5cc2a81edb29f61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147858 Malicious code in semantic-ui-tool-fornax-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc452a16821f632b60df56036af5151063884ee1b108f2aa9dafd78573f9d437 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149613 Malicious code in xanadu-umbra-got-reveal-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09bc596c49c4ad9d9d07157ff4fa1b8000bbe0213ee0fbf7f7bdfa6f7b8f7b26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145590 Malicious code in nodemon-optimize-css-assets-webpack-plugin-epimetheus-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c180a72d45bdbb58b46fcc6d479cd540e67555ef1d4de1fed03fcef981d97533 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141024 Malicious code in config-ganymede-hugo-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 972c4937b0a1a11715489b02260c4d19fd928a94e7a408ded4575366da6e0fb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147844 Malicious code in semantic-ui-dione-graphql-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53702f4357ae4812cdd90f852efcc1e208cdb37c1d724570bfc11046a3a0dfbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148777 Malicious code in transform-webdriver-mocha-webdriver-mocha-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52e5abf93e13670c0204d1213efaf2185a6c74e9b7579971752240918009cebe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142056 Malicious code in enif-postcss-winston-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1533507afdde1c630d91d547a384c87d91285eec2075de760eafe149f859698 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143326 Malicious code in hermes-sagitta-galaxy-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec90e40f5de6e680a929f98fcd6ed7c4d495f7270f6eba14f7bd2b81c596d7e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149742 Malicious code in xo-adonis-callisto-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c86b777e7b69686863ef14110bef4d129fd9013113a9688fb043f551c76f915 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141472 Malicious code in dagda-hydra-centaurus-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 605b352e297554fe9236e9e8e02de5c22194bdced5da448b3c8ffe0d6a8e855a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146976 Malicious code in query-release-it-pulsar-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b9d68133cc11dd8c7ad4eb57b193d34b5c67018ac38ae8f791739da62bed77f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144817 Malicious code in meissa-mui-webdriver-manager-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6ca53b60899d6fb633104b2dcf5537bc67fa0803d7a9839f95ee0a928f9eaf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145232 Malicious code in mutation-spectron-elektra-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cfc5d8be3241831b91454e7c38a3c68b1bd22f5176c552f8e6f778fdcaa045c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...