MAL-2025-147578 Malicious code in sadr-upgrade-airbnb-carina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc82bd40d74505d643d24b7f73aa5b7ecceb707e680b6eaf31a2fecd6cda9766 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141971 Malicious code in element-ui-jwt-uninstall-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b5a60826ce2dae0b128158911da5fd082c31135b1f850b0e1134ec983ed2dd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145542 Malicious code in node-sass-google-node-sass-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 916a91c4d8ed0d001a8049bf53130bc5cee5f30c571b7bbcebcb9ee50036dabd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141732 Malicious code in dotenv-parse-variables-postgres-cz-conventional-changelog-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b9c03c53a96b3a1aa932f003782deaf85651c39cb3869bece3e210ab9492631 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145922 Malicious code in package-auth-xanthus-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68cc5375476c81c36c83cc97476d3cee652e85e96e6b4b8bc0d89151dce75e8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147502 Malicious code in rollup-magellan-hapi-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3490d9c59832ca44c7885eff71bfbba3bba091d61f91ffd6962dbd3829a1f92c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147627 Malicious code in sagitta-vortex-norma-mini-css-extract-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d27f7868efd1778340c9421225ec34498491ce2f4940a49e2df3a0c77f33a5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144907 Malicious code in meteor-despina-octans-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae65bf00ffa8318ec13c12d88ff9a10b09717907e583c9ad2ba69fee6708f1a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144363 Malicious code in levels-spectron-webdriver-callisto-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73f588c6a8a810d94b41a205dab476989bbd997b1a75838b16e70916cce569fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146711 Malicious code in proxima-dotenv-safe-callback-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74f888f6623cfe2d44ae9d4d23bc7a06271164b3c4870137dd080e45dbd0a387 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139461 Malicious code in antd-meteor-pipe-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17253d0738b27dbf70dd54f4a14d25e78c49e7c9045b8cd3a1eaab054173f5df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143157 Malicious code in halley-node-config-zenith-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e137c5ccc468d7a836bbec4596799076bc9c0dab8634e59dbbb1e9e55090e1b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140153 Malicious code in buffer-canopus-winston-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e109a353f691fe89d06cc5a0592a2b088fb07a79f8484ecadd2d786a6a6f3b97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147996 Malicious code in slides-slides-build-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18801354375226d4226112eec2d62c8dadc9530120fa7e6ecfc8a365612fc872 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139563 Malicious code in arcturus-aquarius-corvus-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7008accfc22c14a8af2b886aac5141f689ae9dfc2cedcdee94a9ce96e0ae2897 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141993 Malicious code in eleventy-csv-envconfig-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ef3bc58089df1fd8c787fa0c6b3f40c2656d4f1cf48409ae9581d82d97c9558 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146269 Malicious code in pipe-release-it-hermes-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 463e48d072f87e12dcefa2b95cb79861ba03d5bbbdc8dd98e5490abf583b9d77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144912 Malicious code in meteor-google-jekyll-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1566a64039428cf1418221a4fac71c67096ccd2cc5667551d058f7fe3f6978c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147235 Malicious code in release-it-sass-loader-parcel-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c5b769cb83d4424c30fd9e0d87d8ae149c3c2188ae87c28d2c06b4ec5c28b15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145964 Malicious code in parcel-markdownlint-start-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4558d218085cbba3a719f0a8e2748b8af97f88eb3804a1948c42ee6ce42aa2a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...