MAL-2025-149568 Malicious code in wolf-yaml-morgan-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f25206e1cd05dc85dd05c82e73701f1ebe05803670e00cc1cfb99149f6ee5cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140562 Malicious code in ceres-dione-materialize-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4299ee1b5a3b953487ab291e6ea99362c4b420b372a5776540747c429c4155eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144089 Malicious code in jwt-tethys-eleventy-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 566ab5195a913e703f2510e429b5fde782181dae4b9be1302041922eef69bd85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145477 Malicious code in nightwatch-parcel-cypress-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4543b97d0328d50b59b438e8deb148f568db56de4b1fb5dedb47f443bf2033a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142679 Malicious code in framework-dynamo-react-bootstrap-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de049a6db6a95c67a2bc0734868704264651f3b278204b15e772e2e7561182d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145959 Malicious code in parcel-gravity-lynx-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a0aed86a0b9aca73d4fc0368b4d3dbb20665ce2b49f73ce2a0cdcd4f93f8a5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146217 Malicious code in pino-electron-mongodb-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1eeba0ebccc1bac78a05f546c3926f1383b3bace28db82699d85263a158b7ada This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139286 Malicious code in aldebaran-rimraf-meissa-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fa7d38098563bac4976b9449698657edc1056f58345ec7c9d7025e56c0ecf79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142581 Malicious code in fork-carpo-xenos-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73d435d055edbf91ca49fedb64f445e1a347374a30a36f392b0215d325440de2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148805 Malicious code in transport-ursa-lyra-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89784435b215c5db5e4eb6a5d2aa6f1dcb7a376c23b852460333b436b548c6c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141332 Malicious code in css-minimizer-webpack-plugin-pm2-react-bootstrap-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e00d5bac178637bc480815d914746b942889f67c66d300e04b2109160a5ef251 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141687 Malicious code in dorado-halley-comet-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f61971e696f00e0b15ae7dbd87ae429aed772439dfcd64995928df915731a459 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146744 Malicious code in proxima-stop-chariklo-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 144e30f14e66397a1b132474226e3be01e15f725b235ef6adce6f137588a7773 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142902 Malicious code in gemini-less-loader-schema-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5db0dc8495022edd18720bc3d01c057521a49f26642078a89fdee6a7e5d00f69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149862 Malicious code in zenith-xenon-nashira-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83d619d3ec1c004b82174f5f111ee6cde591c36b7917b4e041dbdba08bd61a58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144460 Malicious code in lint-staged-link-promise-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea094eb5bef67aa642231bfa689b8f67908ebefbd7fb7bb0ab8b13e9c92a4d35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147439 Malicious code in rigel-radiant-uglify-js-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85630c33cb4c0ec6a482317d825de7dd864dfc1abf5642f7f91212d8139d7c08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140787 Malicious code in cli-browserify-mini-css-extract-plugin-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f83b3e7aaa426034023de777e1dccefb9d2fdcde96c988ed4548ef73db41363c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145693 Malicious code in nuxtjs-achernar-sadr-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca69bed6f1ac5109bb281b861bd2e93d1e31ed3f606518daff1af52293e8b111 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147219 Malicious code in release-it-command-express-pyxis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b66213e307184f45c99d6f5d88c283d343d707ed28fdcc2cf3fd36dc4dce28c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...