MAL-2025-141001 Malicious code in concurrently-apex-promise-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d31d0ae3ce5ebb4e1ee8fa5cfdc8150711786b2c1ab557ca0984b632bcb038f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139409 Malicious code in antares-forever-eleventy-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1176b13fe05a33c670c5065abbc172457e68eabe3127f0c4345eb74dfe4db208 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142748 Malicious code in fusion-umbra-farout-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2276a1acac285c4c61c33b38733d0141742a73f31ba16f4d787ec835a352f2d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143334 Malicious code in hermes-xml-auth0-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 939c611aff8a4e335a1a4820c2a72eac66c8e27637a83e7aa8e9fa29618dfaf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143913 Malicious code in jekyll-quark-sync-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa7835916f3c4f8b37024734e440a3eb602cfc77184e289072d3fc20399511ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149875 Malicious code in zenobia-semantic-release-wolf-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f347b66bfab2ad3cd77af9a4c71ef499fd706c4458d617d5e954fd3e277f945 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149689 Malicious code in xenos-run-script-weywot-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44b1e32708e609247ff12298f129e107d30ebeafe72b630f4eb6775ce62f1a8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148290 Malicious code in stop-changelog-centauri-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fc4dddb8925f9a970aa7c5687caf4439035af040dcd9f9d60675c26aaa27ae6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141785 Malicious code in dotenv-umbra-duplex-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e7856ae4344190b8cebd05e3bc90206bc14a97511ec4db990ba37d2fe943a29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145612 Malicious code in non-blocking-kastra-eslint-config-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6733a63686f84a737c0a759a95d9448142cd5dc89513c785f1f746ab028b97b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146408 Malicious code in postcss-loader-scorpius-centaurus-farout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffd95c0b4860dbb6693adebb4eb4bee696b2d9c115cda25ee2ee39158905c40a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145016 Malicious code in mira-polaris-forever-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9839ca6c0ed2a3abb6097d7ab67e407b1aa3ab53b40751672e7c85aeabc8394a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148507 Malicious code in telesto-zephyr-cache-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33571405bfa84576d662602f2683b141983534b474d08b251713f2786dc45183 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145866 Malicious code in optimize-css-assets-webpack-plugin-markdown-octans-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4fbe1c2b2cde5513e863fa8fc192ed8bd1e1098a5964c8016c02142c5a7d565 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148366 Malicious code in subscription-request-koa-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c68b8002383770872ccdad0a33557462f10d80f27bd85d0cf04a9636bc71571 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148235 Malicious code in sqlite-perseus-nebula-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18f6b44d9bdca31d5c462ad3cc3176ab255171b26341dc579e4629fa32c15096 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141978 Malicious code in element-ui-postcss-less-elara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c11f7dcb4ad8d3d253c970e41541c585fb88085c98c421b82c65f7f0453e9fed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149063 Malicious code in ursa-meteor-hydra-oberon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a33770dfbac66ffcb26f1980fbf651debce846bbe4d0a6c950d36e990f3ca549 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141424 Malicious code in cz-conventional-changelog-markdown-metalsmith-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9482e36bbe4901e1af6bb14db59f11eac88fd2d639fb758299a6a41f7db6f35d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144388 Malicious code in library-quasar-andromeda-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9782604e3784bcb5e592be57c38e46ddb5fed0911cb299819acd350f717316cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...