MAL-2025-144435 Malicious code in lint-dione-publish-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cff882e7626745936fd70d55ac96b8390b9cd80e97eff19f2a3bb2a37cf345a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146403 Malicious code in postcss-loader-npm-child-process-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2baa6ea4e8409b7545bd6962018674d00a779c56899d8c1f5ab8aa47645dc2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139227 Malicious code in aether-cache-telesto-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e127d6250ab54fadb00fbe77c714949f9d236ce7d2419068de687c499e213ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141627 Malicious code in development-polaris-lint-staged-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b2c638e326aa053f682240e547e9f90a7b769046b2d21739ef3ca2efad26ca1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141264 Malicious code in cross-env-pegasus-async-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68a6a5d9de5d3e6171d01a2b039e57bcc853f57222af8a5c94eaf0f922621903 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144363 Malicious code in levels-spectron-webdriver-callisto-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73f588c6a8a810d94b41a205dab476989bbd997b1a75838b16e70916cce569fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149340 Malicious code in webdriver-mocha-airbnb-dagda-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a53bcc020075238d1989eb6c590d78b229b53dc5d97c211b7ce2577909b8c6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148812 Malicious code in triton-cosmos-await-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32003048b64cbf0ba382212601b68989e55369fd2e497056999091ee16297a8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148040 Malicious code in soap-winston-antares-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de4d78de5a7e83ac0f3732587e429926c070200f55ddc3718d36e34b490d7f49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145934 Malicious code in package-karma-europa-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23bdf6b5e512069ce2e5a363f939de73973bd72232bb5ed3e204cf11d25dd264 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145861 Malicious code in optimize-css-assets-webpack-plugin-global-titan-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebe61f063ae8ed8ec92d894dc54ee9280ca3d23ea91ef6b081045d55199652a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141719 Malicious code in dotenv-parse-variables-electron-builder-rocket-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 085d08b4a312af876cb255394fd3e539ddd9810f520ab1e0ddcd5f772c7da412 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143252 Malicious code in helmet-enif-gridsome-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2adb39d8e6ecbba968ccf3078cdaee4dc1337a58a7ffa64e62d214da2649c403 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147669 Malicious code in sass-loader-gravity-draco-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d0d8a65fc724223d4447a7e5edeb4e86f4caf1d3c491101f9560c8b5752539d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ursa-shelljs-buffer-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d64623aaf04619e9dbffea237cff686fd3ea843cdbfd2893241c7cf8b3430d24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eris-blaze-pegasus-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 649ba8e5f1092cb16388028b23ead6b8f6e1199fda7ac9c199d2088db3c03feb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144036 Malicious code in juno-quark-semantic-ui-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f502f2c1caa65093d90dda5233d40802fee836fb8ad50de5365505884689d64a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in async-oberon-framework-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5717df4094340a3b32dc4b99bc68bf22c3d181bc748aa862add6b2fd0f2165f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in triton-dynamo-draco-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4159379b4e08c7c6bd86618d3fa0991dc921aa71fdd9fcad571592d2f5873fb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scripts-oberon-draco-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed3525dda84b2464924e546f9db3f3b484347614d1b7b1e1a561b063779b2898 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...