MAL-2025-148102 Malicious code in spawn-mensa-nestjs-mini-css-extract-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd4b5e325e2cfac082460dc57cfc4b2006f296c9dd1b3b9c7ab233de8f93398a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147329 Malicious code in resolvers-karma-leda-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45a7885561d4f9a15a76c0b8ccaa063112fd94b8899f912d7ab979e1f0bc78d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145518 Malicious code in node-config-sadr-node-sass-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7a9531f78b9c6d8ced2fbe159fa6b011866cef7d09a1509b8ae0f2ffbf42f0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144002 Malicious code in jsonp-nightmare-leda-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3fbe40f02d657a7917d90b09bc7249a176e5ee2697ec8b356d4d57be89d66fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145170 Malicious code in morgan-browserify-install-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0347568bd4177056426b3477b7d55efb1804f72f2a55caddd63efe23dead5104 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140776 Malicious code in chromedriver-jekyll-typeorm-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f1c0cb1dbb82edbc1fe147d6a005c0a89fe28d1455f9c3b8588be5233ff4110 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146852 Malicious code in puppeteer-equinox-polaris-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5f13932f9a8e3539f087bc416ba6f2dba7f3d6ed4e3551db43cf729c76f2caf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143297 Malicious code in hermes-acamar-pino-pretty-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 145f910abe8927390314d9dd02154054f3ca7651d75fe2efdae6636290baecd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141739 Malicious code in dotenv-parse-variables-yonder-flare-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49784ee3d9dd79f226089b8f80f8a69cdef17610770db6905ee6f5d95977d16a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147797 Malicious code in sedna-typeorm-mutation-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d61272cda7f06f3fccb46fd29779e95028acbc6fd37fc9c1f6a0c6a66b9f59e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148881 Malicious code in uglify-js-restart-delphinus-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ba0449c1680c050d72fdaf4e88e5538f499c761c28dea380cbf83fdd0af6d86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in link-gulp-warp-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cac3d1abd58eacd1aeab792f93f5e3b7927e722c82a03c0c3333f6692415fac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141000 Malicious code in concurrently-algol-express-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46a0058178b59b515a67b56d6ac529d010098fd03ede8aab04ae2f929cedc8e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146991 Malicious code in quito-eris-markdown-pdf-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f8ea8733b69b5c135fbafdbc9376fa64fe9edce2f35fed5ddc73567efb19685 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147450 Malicious code in rimraf-izar-html-webpack-plugin-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 969f0af5a2acd4f35bc9f6a12bfdee60b30945dd4a21464b014b22f579711f02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in version-bootstrap-query-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c714f8e5e8a905a8cf9dbc194b375cda3d1617f651317d938dc36dbf8dd250a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elara-centauri-csrf-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10971ec1a6733e379704351180a293b3f5699ba9e8531303ce8229853c62bc2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in norma-registry-async-geckodriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13eb62efdc128819d4e6c73446ceb745d539c8ef9c8e3debdd1972bf6210cd8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pipe-apex-cypress-uninstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53c9251bec3c2132eb99478399ff90c6752f8467f76de65164ce742f1006f985 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dependencies-sync-eridanus-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08aa69c1f04a21c437aa1c182048b5f6146d8ac5ee652093cdb056f483f5db7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...