MAL-2025-143532 Malicious code in ignite-xenos-uglify-js-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c6b28600d0a5b6fc572d1b0eb6ef55abcfaeae911378facaaa2446d3aafea59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146720 Malicious code in proxima-ignite-izar-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 084fb8685a8c7d2bc6c472e6376a6459718ad776ec6f90a7099e6a703957c3d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144079 Malicious code in jwt-magellan-sedna-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e629e5f8244e009f62ba596a0f8673d57df9c096f97c189ef541a0cd216c630a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145274 Malicious code in nashira-fetch-cressida-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99f86b96208f69b0e6e8c4f0832ea94f5eb903f45afd4f8c34dccb3a6a079114 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144152 Malicious code in kaus-nightwatch-uninstall-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 286ab42f83d6741c033cb2b99f8f20878c9cb39ed9d7b2fad08c6a6ffbf55388 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143054 Malicious code in grunt-bootstrap-mongoose-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02da5fd610445f9d8951ce43052f42afb6e06fb32c013a06f436322f3aac6fc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141308 Malicious code in css-loader-metalsmith-reveal-md-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 758f19ad3942aa64e870b1cda93f1d3230e067423845a5b4c5d84fbd34acaa64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148854 Malicious code in typeorm-pipe-dynamo-jwt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd526b77bca572558b6629ea1fc82df9ec7e21431c1e8778e939cab55920069d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143924 Malicious code in jest-forever-adonis-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c39d466745ad211662ad71e05f6430482e9219000c7fff7777119024dc32f19d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139342 Malicious code in alphard-test-dactyl-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dac07eed232bd602bb75c1b252ee185d4d14cbfb07298839ba8056d35a032c7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141985 Malicious code in element-ui-venus-avior-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector feeac183e6d94545c4266cef223f857dba6ee25ed0cafd0536c4a56a2021212f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140318 Malicious code in callback-spica-rollup-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f80b7f66ec29b8b7eca48bf57af2c22add91cc10771022df2ec443bf4ba139d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143821 Malicious code in janus-nightmare-proxima-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bba82a0ab80e814c47883bd351c7391871659175114fddc99946f50b92812b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148045 Malicious code in socketio-auriga-native-less-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8108a1e0499fd22a3c86ad23fc52c308e4e96fadcc54d24cc92a56d1dd37e205 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145732 Malicious code in oauth-gatsby-titan-markdown-pdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95122c10877f12bad936946a3f7eb7211935cd5647639dbae9dd654ce2166a10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144668 Malicious code in magellan-testcafe-jest-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3276d8f4b2f01340c5b8606f4b0a0722893d000c715fa38528e4c621543d9f12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142726 Malicious code in fusion-callback-soap-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5f7eb96f887f38576869f47cae2da7442b823c576a30daec11038ac9b362dc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149527 Malicious code in winston-sirius-lynx-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc3250323d484e817f69507a804d6b0379ef2de404ac143263edc581d1201620 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143934 Malicious code in jest-slidev-express-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99742a9afa706416250e8233ebcc22cf97b90e33d02d629b60b8e46448a1b395 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141052 Malicious code in configstore-fusion-mensa-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7480df2dc25d9a8f8ba0219587f72f5d1ac90ff210e0c0459f96e3fbbebb3052 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...