MAL-2025-147677 Malicious code in sass-loader-mui-library-optimize-css-assets-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66e74a0f0b1190b28e62b75438426908b78b6776a7293dc127d4f7f037d74279 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139411 Malicious code in antares-gravity-local-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4e1f7c9396b2a7a5c7973ae9ce956328b03b41449acba5d441c82e93a3d450b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148571 Malicious code in test-eslint-plugin-proxima-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c91bd7cf7b7e85933a0a0d2e82c784d5cf58f651a742a1cb85717e7284c1d4dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143634 Malicious code in init-wezen-umbriel-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bd116e1696c115501f7f27dbb047db3682247fec5c2456bee3ebbbf563f85d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142876 Malicious code in geckodriver-mysql-forever-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cf46b206b074d2689df4a4a26220a882b67118ea0bf588a092a3e1f79777dc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149197 Malicious code in vuepress-pegasus-gravity-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2f30b9d98da16f6d11401b6e3f4e7a2a556ca0adb7e3e59cb98234cbe0a3409 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141702 Malicious code in dotenv-blitz-gatsby-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30494edd46176223c947540db528ceecf7879aa472f791139f7645ad492e282b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139562 Malicious code in aquarius-xanadu-zephyr-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f2cedad061180675ee04280017b0fa390f96a0e919fa21dcb908376553ce93f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141435 Malicious code in cz-conventional-changelog-supervisor-loglevel-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52fc46ade320c9f26fbb269899c5d6682e7f1674db418e2938c9fbe50833c033 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149815 Malicious code in yildun-ganymede-puppeteer-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bfc9273c73ca300d2c28e83d74bcd02b2f30785e86e9bda858c5577c482307c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141998 Malicious code in eleventy-global-gemini-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e8c0435fe8ebe8a6eced200375bd614a35d9850b666688a3440d6800d0862ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143002 Malicious code in graphql-enceladus-meteor-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f303dc4fc3654d2483f1bdbe2bbcd9922173b5307487abd9154297d5ce82c078 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141865 Malicious code in elara-betelgeuse-frontend-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44f3dca50663543b5cf7dc24fae502a6de9e183de1a7d880d65ffdbced035af0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147360 Malicious code in rest-pegasus-miranda-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a609dd6810e3c9556153e9e509d555cd3ff54164dbb8152df6a11c449aa87c3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142118 Malicious code in equinox-child-process-deneb-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fbe7ad61e9974fe7ed3d9c4b62c0e379c9a6f7dda87e121fc18ddfeb5770acb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140560 Malicious code in ceres-cressida-lacerta-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5782a627057146e68a55be11e14e87622c4c6bd1c1a888751f2495c2f61a78cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139614 Malicious code in astro-phoebe-meissa-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcfc3ea1ff019850090bbd63cd756abc2536600f47a0f4c7286e87765eeb204e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141917 Malicious code in electron-fornax-testcafe-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25e6fd8c4dcf774ad276826eeba711a2d2ff461fa4ae94f3b74e2d259b6c1d29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144549 Malicious code in loopback-framework-loopback-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a7b27e27c7246783d05331bd95e459820ecd9975b3cb5f76e1d50febbf6d07d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145776 Malicious code in octans-mysql-titan-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b5be0483f9f2d484a74a5e6c0d466892e53451bd24a35e171e8e7326188258c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...