MAL-2025-149471 Malicious code in wezen-uglify-js-stop-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0cb747f817d3854691f2f4e78d85638306150ffa98f5d294bc280cfc35f51d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145153 Malicious code in mongoose-heka-vega-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 383847364a4a6c5347ff15734218a9aa69c6613e8c82fecc6e11e4bad9d1563f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149863 Malicious code in zenobia-bellatrix-gravity-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1c29f1918a6f636e7b6bd048f770510b7604e2b3c0b585ce4537f242137fda3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in socketio-fetch-jekyll-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9efe617b8bcff506202188a2185730198b6d121b775deb965f455bd330366677 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scorpius-sass-loader-jekyll-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9069ae233c85f24ea1a43e58d24f242ee930f7dce85b47136affc3a6ff7321f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magellan-astro-taurus-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cf0ce6cfcc1944002839109c84e81c317bf8ee3ead756f370ece942286982dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reveal-md-procyon-comet-jabbah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcab1159cf76926c18c79e2f1c43d83439f8a65de204c132c99d1e6708726f95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in element-ui-blitz-rehype-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5703559ccb48b8cadd72f98806f257de1c353bc73844645d168a5122d81971d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in markdownlint-antares-development-nuxtjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 159246d8d4207be330eef63c7841b4101f0e806190d6bc45b2344c63e20bfeb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elara-leda-xenon-carina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c919975392789b84a5ad2ae76e77c08567dc2d742f2c82e0e350e67652b7552 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indus-optimize-css-assets-webpack-plugin-antd-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 678c75a1f2a4473c3bdad22140daaaab48fb2b8967e39e94cdf6b036285b6a11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gatsby-axios-terser-webpack-plugin-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7573c140f2f7c5a7620b581075885de991007171f019efc1cade3e8658883a4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magellan-toml-pyxis-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc6dc533b7eafd1a447732d5171a98cc252177054638dda40dfda403bdeecec8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144183 Malicious code in kinetic-redis-less-loader-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a8d3a75b7951bf3e14a2ac494223afe6699bc3b3716dd22cc8a38c9ed9ddc78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139677 Malicious code in auriga-figures-karma-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d7e3a0d376b13715a52ff3847b5b8c3c11a9b9944d6df465841ca5029f962c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145647 Malicious code in norma-react-bootstrap-commitlint-config-angular-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af2830a2fb96d2b57865f9092fb10f30f5a3f718fe0e9e982c4761680dc9e7be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140737 Malicious code in charon-thuban-axios-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a62878091dd31f40a00204cee8df3fe4229ddcdc28f34c23574e6211e92f6ff2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139849 Malicious code in babel-cluster-zenith-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f977b338090844b6481ac64a9e37f943917cc5613c463d25d52acc8f6557183 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143821 Malicious code in janus-nightmare-proxima-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bba82a0ab80e814c47883bd351c7391871659175114fddc99946f50b92812b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145514 Malicious code in node-config-leda-test-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9a21f6351d5a2036a3bd77b33eba4565d2a5efd4c25ee98e9a3019f669aef35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...