MAL-2025-147678 Malicious code in sass-loader-native-jsonp-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 721529421aaeef8accb9c675072bf8c91146dda70fecc5f4ea3d58ee3727c41b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148613 Malicious code in tethys-commitlint-galaxy-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36c8d865c713f0bfad46c9192deb53efc6b0e50650c66cadd892196d27b5ffab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148629 Malicious code in tethys-pino-pretty-algol-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 467af395bce0f84fc6451ae43c6c749e70edd4dbd4beec8a23658c5071d81ec2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141057 Malicious code in configstore-magellan-express-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2e92b71ad3863c6962c41ef8724e17f7af4f5f9dc8250941e83cc597c9e9496 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142224 Malicious code in eslint-pipe-rigel-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 945b68e2b23a41cfec0080ab381b2aefd14282d4ee2b94a35c51bdc20dc5ea90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144775 Malicious code in mdx-react-bootstrap-react-bootstrap-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6ac8de44fa35aba6659662beabc7f831c0439a35428e5690362dff458355543 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149705 Malicious code in xerxes-foundation-postcss-loader-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e106167988c40bc173f487701891303d610d3df571fc17138b7208a32f46b453 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148423 Malicious code in sync-envconfig-apollo-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c0522e5416d0c39f55f4726793f21f5ee783f6cd714aa945b7a8b701df0ae65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141055 Malicious code in configstore-jasmine-ceres-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b506749090be0e7373a54672c453e5a35f5a6c0622992493a6517898898abc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140531 Malicious code in centauri-inquirer-playwright-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33eceb573fb5c10331f4baf63a234582dc8a9784a8d6b1c839b3ac0f7a0a30a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145972 Malicious code in parcel-spawn-dotenv-parse-variables-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ed298e63ca52c57450c7e91203459cb0de3fb49027e441425ea32d0c6cb9db3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144343 Malicious code in less-protractor-nebula-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9408abe13d23077284ee2775377bab10375093115e0c5e9a2cc15760187cd65d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146289 Malicious code in playwright-yonder-module-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b8a88d8d6c9de0dc9811395ffc27c01a2b4ffde660a8f412ebbeaa8db6930e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148669 Malicious code in titan-adonis-nestjs-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb39ffce40c8af09af9eb6ddb26d2f4ef5c413bf45dbc9bbde30b530839a19e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144545 Malicious code in loopback-cors-scorpius-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66719063eaa5d6534858f4fd987d7ddb6562a50ec3a91cd01caf702bdbc25571 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147601 Malicious code in sagitta-koa-io-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4851a6afc2d0560423e4f641238690dd6144607978993a528fbaa40438934d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145274 Malicious code in nashira-fetch-cressida-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99f86b96208f69b0e6e8c4f0832ea94f5eb903f45afd4f8c34dccb3a6a079114 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140240 Malicious code in bunyan-canopus-kinetic-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d539cc7eb5c8f4faa4c7935908582514a5cabc02edcf4ca728eabe1cba80e500 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148130 Malicious code in spectron-webdriver-galaxy-avior-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 317bb9278d2a73a86218487b9450e0f1ae0dc5d4285a554b8aab31464d25d0f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143130 Malicious code in halley-auth-vega-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9e198bf855eb0b039d2d08b024a85c30d227cbd2fc6698801a6f92c2a987080 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...