MAL-2025-143694 Malicious code in io-elektra-chakra-ui-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06ec836c25be7c8fccdbaefff9c32a7db893a66dbeab6e8597a1524652329167 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140030 Malicious code in blaze-release-it-cross-env-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 035760773f3f844c226c558569ddd03e46481efc0be79bcfc58a3adea2384f53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146391 Malicious code in postcss-loader-css-minimizer-webpack-plugin-achernar-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfd5bb703b8e57411fa94222b918c4cd6f4d263eb9ae29e98c2aa60912ac969b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142755 Malicious code in gacrux-chromedriver-cosmiconfig-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f882b9247107fb64a948c02c6d307448b291c19157e87e972e947643ece1623f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141228 Malicious code in cressida-cygnus-commitlint-config-angular-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1141bebb30cede52e274e8085246ba2bf01af23cc1e83a43047a2bc8e1ad55d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147122 Malicious code in registry-csv-corvus-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f8533a9b1ca45fd27e66682a0d0a0ab2095d395ab5a7b5b0e0ec55e3c98200d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146415 Malicious code in postcss-loader-yakutsk-europa-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b3934a796437258dfb3b5a9dc6649a7c7e4471263fae908da9840c57120e65f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142461 Malicious code in fetch-virgo-pegasus-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccd32cdf50e098d0e2c2077c240e4daeb39d7defafc0a8c6f4ddebe06fe32de8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145053 Malicious code in miranda-repository-adonis-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1603d4b742f0b3f24eeee1437a14a2801933ddc0b97820f8c2340a117e1eba1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141387 Malicious code in cygnus-umbriel-inquirer-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c0bf2ab43841e4c62581daea5b6a0f8e07b10b3a8a9717077ae93295ea710f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144988 Malicious code in mini-css-extract-plugin-postcss-hapi-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01be8cfa96e4044e64f8c668c0d1417368b0897ee88586a73bd7dd7c873c629d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148317 Malicious code in stream-ganymede-semantic-ui-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8d2d21c2aba42884dc74a9306d2b5780925eac3e6e9fbc5db65bb2e22d780c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145859 Malicious code in optimize-css-assets-webpack-plugin-commitizen-envconfig-charon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d50aa2e0311402f756bc306bf743331b6111d2ad0a80567bb1f6b9af5c82adc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146812 Malicious code in publish-schema-scorpius-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69853a39d7a0295572d26acde7950f2beaf45da49f5298625f19213d97277f94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147437 Malicious code in rigel-npm-husky-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4121d03d3d7344a67a6387fb32c258d9a8f98720a9c72f0c3078d499a9a5baa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147863 Malicious code in sequelize-convict-wasat-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c8a371ffec811bbe299709921e05c8eb65ef5d526eb298988dbcbb38588651b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143712 Malicious code in iota-bellatrix-husky-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2973f9118f939e46c373ee35b5c10d61a18a3c353d952bce4928a4ce858d4aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143092 Malicious code in grus-envconfig-halley-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 685e558751be0ff44bf9e4c96d7586de4b6b3509fa5eb90db8718448fe4a02a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139618 Malicious code in astro-test-corvus-impulse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6382e0cad627d040444c87f7effe7c6a89f01da98d9d02c5251e2f3881960d02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146229 Malicious code in pino-pretty-antares-wolf-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ff6395df5bc3336a6a4d7f56b89b2d327305c12579b282ae41a212ad7b8aa26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...