MAL-2025-142853 Malicious code in gatsby-vuetify-development-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 115d3938de17f161d1328e3a01824c8b612e47fb942519a31d5f247322903bca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149381 Malicious code in webdriverio-relay-update-deneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb35cd4a8696fdf25e749474ec557164531cbf2d0d80b09118786fac9cb70fa1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144807 Malicious code in meissa-heka-wolf-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 303ff4a59d56a3eaa154f024f1234b48e7c42b6f0addcc29a1998dfc7c7cc0eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144343 Malicious code in less-protractor-nebula-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9408abe13d23077284ee2775377bab10375093115e0c5e9a2cc15760187cd65d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148839 Malicious code in typeorm-chalk-eslint-config-geckodriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5aff76e9e3c4abaacbab53d2925a5beaf6123e1fb7c7b9f1188e19683a502889 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147968 Malicious code in sirius-prettier-stylelint-dotenv-parse-variables-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 611e5e66a2dadc8e4f679552552d528775057968cb7051d625d46e870b5fd204 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145113 Malicious code in module-polaris-dactyl-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8a72463d4d1200e3476f7c45575a7a197213739bf5954a2109210a8d2d91f40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145768 Malicious code in octans-dagda-winston-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 896316fc7d2ff80226f0bb3d262ae8bed0818fb9a42f3d7bde21fff4fcc37e31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149588 Malicious code in xanadu-await-rehype-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deb456e8d781aa45a1dacbf7f30970b88acc27ae993d3a50689322268cf4fcef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140258 Malicious code in bunyan-umbriel-relay-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44f3f063c2281fff1e1b70c86da2fc195585d3c059d7911720de2e6ad6746f90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140342 Malicious code in callisto-miranda-commitlint-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b34dc3e8dd56356d3f11ca37b5a7ea84a6f80b94cc36ced66471e8b1b501997 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147609 Malicious code in sagitta-polaris-markdownlint-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72ada06cf4bada5df5defef68478de548bcf7148fe39f7c3cb5dfa4e16d3ecbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147281 Malicious code in repository-rigel-nodemon-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66b245c5bad420fe8b658ba8fc96bf22f6279e86661f42a4edfcb8cf101ad1f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140857 Malicious code in colors-ophiuchus-apex-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fac9084cf98ce4dda9f94e9b7e0f33074d12f8aef60576e6d3e1ae09d9903fb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147601 Malicious code in sagitta-koa-io-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4851a6afc2d0560423e4f641238690dd6144607978993a528fbaa40438934d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141912 Malicious code in electron-builder-spica-halley-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64c33cebd4c8758db9baccad9a14ccf7c4c7f5fa9cea61bf0d798a2277d41bfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148109 Malicious code in spectron-bootstrap-yaml-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3f56029d7ba08a16d0e0186ed582f9e0eee3faf4dd11a94341de93ca17195cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144992 Malicious code in mini-css-extract-plugin-redis-tool-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83c76cbb410313e8695796c355998093a7f80575a0ef4bd8350a10b4794b4192 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139165 Malicious code in acamar-canopus-mui-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d4fb2afde0e9df1141200a38e0ea82bee518c42654864678f9679e55f5ee661 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149522 Malicious code in winston-procyon-norma-xerxes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d0a7b8a2c352bbf7bae65cdea75bbfb5e043e5d4200b05dbe0ac09a2a07df52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...