MAL-2025-149462 Malicious code in wezen-mira-morgan-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aced490826c2d7edbe824a07a4bbed1a8ee680171c14127269d06d326744906a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147662 Malicious code in sass-loader-cassini-socketio-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39ab95f0501dc0a030fc5556c18a95ff3c795c37a88420e23f40f0791373f795 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147667 Malicious code in sass-loader-foundation-jsonp-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4e0350965ae13726f78400cab872791dc3e71479029009fa263dc5231d24251 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144330 Malicious code in less-loader-sirius-perseus-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f8179d4fd0c1a7546ad53b8f5e279073c0c9796bf3b0ca8aafd3ec5fbb3ddf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145206 Malicious code in mui-npm-typeorm-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6314a131d3ae7ce58ce6e7f2f0c12949b4c1a9bc4551a6aa7fd2968d2e38c876 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147690 Malicious code in schema-csv-octans-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c3ff1d427c6dc5249ebd942a1b207b0ea02860a4d1ee16fa12badf4b8206eae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142298 Malicious code in europa-vuepress-sass-loader-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dc630cc3b9853a3e4a5ab5e6fa977d883baedf6edd8f9d7ea2803d49476a0cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146527 Malicious code in prettier-yaml-commitlint-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84197f8f3211ebef49ce9b3018f98351e783404d7aee0a1de774671d75066fa7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144505 Malicious code in loglevel-changelog-alphard-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65d395e043fecb51f3ae6e80dee7c17f2dd39951144372bae08fcb292c682706 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140541 Malicious code in centaurus-bootstrap-callback-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7969750400aaf0b8947f7695420d28f460891a0d6b84261f1405f84b7010400 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142594 Malicious code in fork-mocha-yonder-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99c491513b6938921ca5241a8998339c02828360ecd28a9321d7c0c9a7ef54ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140090 Malicious code in bootes-sadr-epimetheus-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f7187ed92b4f0fa96ef7df782f26c59bcdeb9ee008077d0be627c6ee0307554 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149063 Malicious code in ursa-meteor-hydra-oberon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a33770dfbac66ffcb26f1980fbf651debce846bbe4d0a6c950d36e990f3ca549 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145784 Malicious code in octans-upgrade-celeste-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6820d8f46993738f98dec508b4393021d4bdbcb9dce746d48ce684c3ee1fb7cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147226 Malicious code in release-it-mini-css-extract-plugin-prettier-plugin-markdown-commitlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eef36d47d6ae8f741f94ac19f984fd1f6347dbc887b13c2ce02e86997baa8cc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144588 Malicious code in luna-xenos-relay-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c975620d825a283af00eabd79645d08b0c38867f081c7fdc2039d5129aebced0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144437 Malicious code in lint-fomalhaut-commitizen-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 518a1bd0c06c518cbadc3f73f47622697bdae7c959d3981ee9f49276a7973fd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145336 Malicious code in nebula-bulma-transport-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b901ab2b042e34d6b97c28bdbfc77d59d7599338dfb7cd5c7b18ddbb4e341a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142165 Malicious code in eris-chakra-ui-sass-loader-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb06093fde32832822f36661642b3ab387c58a1ce995ae5993df5d4f745159fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147014 Malicious code in radiant-equinox-pm2-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dfdbb60037d98cb4076c74dcd46b2323884f2253eb379e85db9ad413affc169 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...