MAL-2025-140660 Malicious code in chalk-wasat-juno-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbe737cfc109d50d973a0bd7ef6bb85265322f12059957b9931ec6ecca31060d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147793 Malicious code in sedna-sequelize-less-loader-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c21acb639bbf2efdb260ea223c2b12d93b35a5e8077ec424222d65f38559509f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140561 Malicious code in ceres-dependencies-restart-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84afbb88c014567ce635de5bd2f5f6ef18ad0d1ea7dc744aeab38c3484ada01a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141252 Malicious code in cross-env-despina-uglify-js-terser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1edf31c854a1b8738e5cf7f2411e20fd1a6ef824b769d3447ca29f3499f0e7bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141399 Malicious code in cypress-hexo-publish-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49327fceabc44149bd1524f1da1aed84393c4338514085628a89baa28afdb1e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148946 Malicious code in umbriel-promise-castor-spectron-webdriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25423b6a88b3a1c0a58ef731a3b43953f038f98821196d861e05adb0107b9f3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143451 Malicious code in hydra-postcss-heka-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29fd2d7a5c80c5698eeb615aee37f27284e32645ca8a48cf6d96f7e32684f2cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149324 Malicious code in webdriver-manager-lyra-nextjs-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d673068fcf9b21a3d597a451846ee4886f0d517a03798c3d94fda72e0283bb79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147235 Malicious code in release-it-sass-loader-parcel-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c5b769cb83d4424c30fd9e0d87d8ae149c3c2188ae87c28d2c06b4ec5c28b15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146519 Malicious code in prettier-stylelint-slides-ursa-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 165eb7dbf8e78106fd4075be2174b6f4e8ebe6cdaf5156a1fb27724449e856c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144237 Malicious code in lacerta-dotenv-parse-variables-charon-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 655f0990025331f26bea8ba9a4718b3206e5931ea8fefccd766e369c6312c564 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141864 Malicious code in elara-barnard-koa-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0cbbdf075d7109a488c5c9b24914639e5f324c8f17792869971802a71e91a0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143871 Malicious code in jasmine-ursa-resolvers-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25c80819ffed81f8025307256957f70a647148d6e5f6fd9033a58fe0a3de2494 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145113 Malicious code in module-polaris-dactyl-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8a72463d4d1200e3476f7c45575a7a197213739bf5954a2109210a8d2d91f40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141808 Malicious code in duplex-elara-charon-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 494f2037fcf883fe2bf066df716f3152638b27ffc4349a02c360667bd18cbbf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140801 Malicious code in cli-install-hercules-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 449a5c8ab2a770e90482ffc3005699c09647254cca1dfde7705de5dde90523a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140663 Malicious code in changelog-bulma-meissa-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0babacd4b2202419befcc339789b9595da99bbc780c6d678c8c4a17261fb6900 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145597 Malicious code in nodemon-test-cressida-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a45f88a96a3af72b496234c0c4c6208f7411c56f0edceabe35a5af110a4566b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143296 Malicious code in hercules-shelljs-xerxes-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fa8de715e5b1534b7322f06bf1f7d591feb8f069c023490ff6e1d16a652a70c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ini-meissa-taurus-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fde40f8918eb9e87872b046a3cae472845027cd5b7dc2fae91854b0725c92ddc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...