MAL-2025-149271 Malicious code in warp-kastra-upgrade-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28d5fc845cd12256e7a513ddb060ed7d94cd1018470e15f449b1637638276e85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146388 Malicious code in postcss-google-prompts-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68e3cebc126d02237fd746fc3461146e32650856c04c1abdad20a0015402fb7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144262 Malicious code in leda-commitizen-markdown-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b8e979a090f60a54fca3f0d3105d850cc6f5ab00b9a750dee625b3aad03d57f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141858 Malicious code in eclipse-pm2-middleware-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a827d03584958286b872f476566e28d5109d4f9b6c36b5b27c391bc961ff95b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143708 Malicious code in io-version-spinner-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fcca631af9bd1225bc2295e4972bb17157ec73006cf5109fdfcbc42aad6da17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142373 Malicious code in express-electron-builder-eslint-plugin-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7456305cc58ebdceba37e7f3ac074cb977be82975180ce9e478f8c7d20a17f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144362 Malicious code in levels-slides-build-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8543e56fca41cf3dcb13c8ac2ec0d8d25c903a3e0f9631e4a714703b371323a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148339 Malicious code in style-loader-resolvers-alphard-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 956d9bd3a391bab4e4ca35d2acdd9cfcf21f89ccc6fb00de7a1ea2767b1ec6b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146001 Malicious code in pavo-loopback-proxima-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb5ba9267ef221e23f87fd4055f40cd06c025a40cdfdd667fd85c1cc6574e31f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145268 Malicious code in nashira-betelgeuse-server-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 114e106d1af305fd424f041b938c63ed588b82a0134eed432a6241a89e0288be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148880 Malicious code in uglify-js-quito-ursa-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaadc495679e60a19ec8445196bd4b7acb163dfea8b86c1a624c45ecead0fef3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143478 Malicious code in hyperion-hermes-xerxes-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb79ac3641111993364fd68a5541c4fc3e81faf66fb042b2aa4791d8a1db7eea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147811 Malicious code in selenium-relay-nashira-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 431b7e15efb9c3f0cf9e13dc4183e0b68c73965cdcf71243a54a558c44da98c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142405 Malicious code in farout-cz-conventional-changelog-xerxes-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a3749d15f0ed5daee79bbfa0fe5c0867b99a26caf87494156a93eb26468dd25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147764 Malicious code in sedna-envconfig-halley-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c894f1e7863b906615894f2b713cdd911bd1d750fbc974f24b4727c592cd80a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144725 Malicious code in markdownlint-prettier-stylelint-impulse-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ad1196d1bea592e2c0a9af35cec261779a44ca6248ecb86efe0670193f7323b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147860 Malicious code in semantic-ui-weywot-helmet-pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e0a53bbb200e288e011a66c230ceed83ac3c385d940f20237fa3f3469a85a53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-parse-variables-meteor-gridsome-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0350e4e97914558d21236dc86b33cf1f8a2f17eaaf6880451967e6cb9113f292 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kronos-grus-scripts-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f99b9a7468f04a7afd8f06f5a0badcfae4fedd17f6c6995f43b1ed54c14f497 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143917 Malicious code in jest-airbnb-remark-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 300e1c61b12b3d1767ab9e42820d1f4b77d4cbb95072146fa11f5d53d1d5e4ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...