MAL-2025-147219 Malicious code in release-it-command-express-pyxis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b66213e307184f45c99d6f5d88c283d343d707ed28fdcc2cf3fd36dc4dce28c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148089 Malicious code in solis-spinner-canopus-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70de15daf42e5880fe1aef7c23ceaf254db562fb9cb058e44b29f7c137f04ec1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in browserify-miranda-perseus-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48e4c5bf2761040c3f25e96689c52442b835b80434239fb7a472b30a5cb37178 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143896 Malicious code in javascript-yonder-mdx-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a05bd12471c26111582fb880b7b86a83151e218c40d900842b30e9e5b6c8b84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148352 Malicious code in subscription-css-minimizer-webpack-plugin-carpo-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4650e80b2c1aaee9d51649d798ab8b1dcd57d9d7758ab69e3f31252ae44e3485 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141655 Malicious code in docusaurus-apollo-procyon-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d68775694f1a02f061a9166189e1da1036c33dc0f57dd3bad87a9118563e46c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142544 Malicious code in fomalhaut-library-carina-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cf33dfb38061f04102f930ca05f066db39305ec29335d77c56c418bba3bda7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148765 Malicious code in transform-json-react-bootstrap-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee56afed477b3208f399ace13da17ece3997d082d7f14dd42a008e1e2715e635 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140998 Malicious code in commitlint-zenobia-run-script-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16404836c6f02879318bd5e43d055f2dac1eb55ecd652eff9934d63f3c3f7e6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145194 Malicious code in mui-apollo-transport-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22e66318ce09120e6b5ef2505cdd3821e25d5abc7bf54a8e2a36bfd13731808b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148268 Malicious code in start-cosmos-soap-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c1ba368fddb4ebbcb5c479a5aeffb91aed8d9906574a5bdf14d47291ed1c503 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143401 Malicious code in hugo-solis-unuk-optimize-css-assets-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55a358ae0338cacfaa7981c4514eab086f65c8e99c8212c3a925d86e5c82ebff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140161 Malicious code in buffer-materialize-config-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18db55707488097b21f274ec5371d25d8c58b91c6586082978d0fb1407c73349 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139826 Malicious code in axios-docusaurus-node-sass-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edbb6d2fb12bad9e44295778236ba91dbbdac0b8e668c461c5030b7c439e518a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140181 Malicious code in build-altair-winston-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24932c776e1ae81f75ee25cc117faa978fce6270eb11033b71b6a84b645c6608 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144761 Malicious code in mdx-colors-bunyan-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57ebdaf7ddd748565865373709f059db4eebe245bfba39889caf703a67e93af7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140649 Malicious code in chalk-mini-css-extract-plugin-await-xo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc95d987297d2296f6f6c0e9d232cbc6e474b2557b42681d1cf2da9395a8e419 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142367 Malicious code in express-auth-registry-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec068853f97580dd89c495e698ab8c8a2106c601302c5315c4b5fd9a753ce00e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147215 Malicious code in relay-zenobia-webdriver-mocha-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b73afecd50bb21b7928b5f8587d1351cbd5098add2bfb6907d1b41a98d919828 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142219 Malicious code in eslint-gatsby-init-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2927981e2214a116cfa4d45c9f21260f04a036db99fe2eeedc2531cb6b09dc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...