MAL-2025-147056 Malicious code in react-bootstrap-element-ui-gatsby-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4175fec53eb9ea162464df2522513155eda1ce993052c64a2b283b5cdabf86a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in convict-rehype-callback-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b999f9586825e4391195c2113eb87bcb2652d51fac4d2e786258b93821d60d31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prettier-plugin-markdown-auth0-firebase-yildun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1d20ea5f8451b4e7873581d84782fcd1bd8d4215b0440c2e223c82b0e0c65f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hugo-tool-ignite-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd6de72519d8b5e933f1a81fc3a4e2a4588141210ebaf18faa2e37aeb8b7a0c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in element-ui-winston-html-webpack-plugin-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 533d17b064934bf10be2328e4f60324b7af8f0958bb35f3d23e89346174c51ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enif-middleware-bellatrix-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9127fd7d76d0f3c78514f671964e2d7fb10b763951b5f7d131a4c1811348a583 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148528 Malicious code in terser-meissa-firebase-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1882021d75d0b4028b69e92eda556a17a972e548f88f350656c1ebf0e431763 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148893 Malicious code in ultra-exec-event-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 441716421f5d5b913842f86b85b33d31d07b792fe47e55353a179bfa02342063 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147418 Malicious code in reveal-md-npm-xanadu-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 629d89f7b1be944f659a687e97af8a2015633a9a203bc410f906b4d6621a9a29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in library-ganymede-axios-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2f571dda046abcbb1c1c42ee2c0d27e57c8f35d99e5bc05f426ef1ffdf76dd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141674 Malicious code in docusaurus-pulsar-update-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c511d5a2ee8f9a523e4d749bd04e47f8df8f083c1a69cb00ce364a7c709c6a31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148616 Malicious code in tethys-dependencies-janus-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8d1191b9c0587f4ac87abc4b66593db335f11933cbe034825bd1227e61287ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mui-uglify-js-ophiuchus-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab3763d689299b26c905a36ddfa3ea5740c798a3ebbf3ae26b8f4a1e4150c295 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145869 Malicious code in optimize-css-assets-webpack-plugin-regulus-vulcan-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c07d2b8b61c7ab9e326b8192138231dad82b035a739b9196b7f208ca7b97637f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bootstrap-comet-convict-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1090d16dc37057a5852adbfd5f493146d23a9dde058a92e0f5e68cf23ffbe844 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139807 Malicious code in await-request-docusaurus-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ede9ef0a4df2943e87caf38702373e341c5980d77060c18526a2c85fe8f11c83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148786 Malicious code in transport-draco-blaze-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 207ef2ba0846e5d36f057c85c4930563d7d0622d6842a09081f634ce315dd2ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149678 Malicious code in xenos-gridsome-quito-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0eb64db054ad50159c2aa8b92655c222fcae4a6789e512b97c9f29c9f9bffdd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sails-markdownlint-husky-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deac6805d708e640aa50b6d65b29fad2ecf88b4cf854aacaa08dc114863dfcc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140520 Malicious code in celeste-remark-readable-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 724e457d8f4a5cdd399e63be6f869bbfb4f00b98106d11925fdc6580ac65bf57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...