MAL-2025-139759 Malicious code in auth0-style-loader-polaris-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 017babb992767ee4824521e3abb64ee04ac53ee11d2883e77db12c39112dbb76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146914 Malicious code in quantum-regulus-xerxes-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c14a1f44c2f7c4f15e67c01fa676fe8a3e69cddd184659b61b87deb61de9a5a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145792 Malicious code in odin-corvus-sirius-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fee67acece68dcfece32a0e3209034a208b1d4e721722fb1a87088b70c3792a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144787 Malicious code in meissa-alphard-xanadu-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d6668f5985e5f35fa72d6b9db250015c07e82b0b503e0aeecc7cfc004237ec9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148528 Malicious code in terser-meissa-firebase-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1882021d75d0b4028b69e92eda556a17a972e548f88f350656c1ebf0e431763 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142423 Malicious code in farout-repository-deneb-farout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c12a3a3f541522dac8d16f4a3a5823d0f5cc7e2eb54a84dcd8b8abfd9f3a84ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142902 Malicious code in gemini-less-loader-schema-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5db0dc8495022edd18720bc3d01c057521a49f26642078a89fdee6a7e5d00f69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in configstore-koa-auriga-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fec891d8d36bf91550a25ccddc62725c4e39f3ce261e3df0fca4ead91d5fbf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140604 Malicious code in chai-pulsar-carpo-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8ce4a96f135a3c69d6d9fe7fd4f2bfb0e7b88c4879a666884f1fa4f1f6d13e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chariklo-jest-titan-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4f4fa5e2efa6b267cf81c7911f6cc457036256039097ea7f0efc376e5585f15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142743 Malicious code in fusion-perseus-global-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca61a064c244c729ce59da09fd651affa69b1ca3d9dbdbf0f32887f5dadf1700 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146495 Malicious code in prettier-plugin-markdown-sedna-sagitta-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 458b40a7e21ed9c73ea33d3e2828ad4a708c2484f3fe0ba8a02d4a89de882286 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143499 Malicious code in hyperion-sedna-umbra-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8b9009f151a521eec1da0eb97632ce95d3433ba6e5c443a04f0c827bc181730 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148683 Malicious code in titan-markdown-oauth-spectron-webdriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43b3aebdea90601592663add6a87ada63bdcf39787421dd0f0ae1f71b1ec02f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145351 Malicious code in neptune-antares-impulse-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66e4aeec5e35aaa7df7ac4e19b56ba63478ec0c9494c72c93d7d0c2bd0eb5ca1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145595 Malicious code in nodemon-sedna-elektra-optimize-css-assets-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5945109b83f9ae125adf57990fa9ae515fb677c2bef5f12a56a6c7192ac91329 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141332 Malicious code in css-minimizer-webpack-plugin-pm2-react-bootstrap-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e00d5bac178637bc480815d914746b942889f67c66d300e04b2109160a5ef251 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140390 Malicious code in capella-kaus-global-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 699839cc245a757edbe4e1980aff3716ed5cbb4f51e2786662d90515c8014ead This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144121 Malicious code in karma-taurus-browserify-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 232bd8b8068a1ff13d4b4659cb36d3a3e4198a36dfc4c886d84bdf7445daa6d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143498 Malicious code in hyperion-scorpius-xerxes-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5fcf3ea9fcafd2dcd691e048a33ae8872e48097d9d1a615d8762e7bbaec02d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...