MAL-2025-141311 Malicious code in css-loader-pm2-meissa-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ad65cb01523b340d02484b6784a0e5e1544a685abd8ffac919f717fe1a13b1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140092 Malicious code in bootes-stop-transform-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20374e8caf0bd75d4edba32a6b2f96df1c8c8e237574c8e0c54b06adb98a25e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139715 Malicious code in auth-atlas-oauth-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cff2e1a60b148d3151b2476f58874193bbcecd8ddd2bfee1f592bde3031ced7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147592 Malicious code in sagitta-dotenv-parse-variables-sedna-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e631ac7a9f4e7976e8b8d30eb13de54d25dc87fc9cd528ac93f946c47ca990a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148426 Malicious code in sync-meissa-meissa-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 862badc46bc71b54f5183f457e3a9bddd4d70e64ce646c35a0452fa625d03eeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146896 Malicious code in quantum-await-meissa-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b266656851997bd16c46368109e5670283650a90335453f7273328644de42a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142898 Malicious code in gemini-grunt-spectron-webdriver-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector becd2eb0f83b8c1e751ec487940539f95186eba20bfebf72fa8634b5c6935a7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144252 Malicious code in lacerta-ursa-process-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 108481acf0733a6dcfa4494b50cff9fd397842b2c03148422adf1b8d22d76315 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139171 Malicious code in acamar-cygnus-hyperion-mongodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54902156b4b37f88f59026798fee089db5ff6660a5881c39ec85cba8ece7921c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139481 Malicious code in apex-magellan-winston-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52039775c5083912cc2f65d59589cc60afe8445d9510280b6907bc13154e2861 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142408 Malicious code in farout-despina-scorpius-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ad7b76331424a8a1a1b458b74349bbe8a9fb440db79c54dd93f88c05be30d17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149549 Malicious code in wolf-got-corvus-prettier-stylelint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d5e498c81e00b302004959da9d5dfafb435ea456e7f6d839489ef09f645ffba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140578 Malicious code in ceres-taurus-quasar-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7528419e46c0d12809177e0fa4d0f3c6134f6880835bed163f9c24fd3a11cb62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143007 Malicious code in graphql-pegasus-yildun-reveal-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93fd5d8d5ffabf5a6e98ab6f637fc92a3aa9c1bfd88b764248f80be704576bc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143817 Malicious code in janus-meissa-async-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8375482f6b277cc61492190443b2cfe5a3ab44b8a36fb400b592ba1fdb2a092 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148011 Malicious code in slidev-nightwatch-uninstall-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a80829097b2716b4af04bc74ad7affacacf4db819ea009dfc6f652948ba2ad69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143737 Malicious code in iota-pegasus-radiant-xenos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2531c5cbdb119ecb6a54a745c27ee948801438590866abeae89bed715462a56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141135 Malicious code in cors-schema-nightwatch-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a3068afe7dca873227fe3f04e64f38db980de42d0e7cc3bfc9bd80c41ccff06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148115 Malicious code in spectron-dotenv-safe-titan-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94e48c87ef5045bc4ffe85b3fe5f47863ca0f4efdf3a56a18800accf41a3c842 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147461 Malicious code in rimraf-vortex-nashira-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e38ac0ee46954d7b993079acbf423ca421753c5b7c1f34ee247e3328be09c172 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...