MAL-2025-143999 Malicious code in jsonp-jwt-avior-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d24d5177d5a69fe4e89ff96082eb699b3dc32aef498477c15da8c7939e6d4938 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149581 Malicious code in writable-supervisor-zenobia-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50daf5591e2972fde227a78418365d4f057660287ba31db763855088858763ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139444 Malicious code in antares-uglify-js-child-process-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 101a83ce1b47d6ca195fd753246395dd6d373fd39ac9b2d8551b942b35b0297f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143349 Malicious code in hexo-procyon-neptune-spectron-webdriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4619fd351f85f1a9556030bb0bf06dcf219938961232dcd3f091f3f5d47fdb47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139300 Malicious code in algol-markdown-halley-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7abec0a1e0d1bd6e1a3f5a47c0ff1c8105d1d1f3a957783903b664a226c7ac3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143980 Malicious code in json-prettier-stylelint-leda-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 311240dbdb6e2255d7827b9b6f16c5a351db73978700f59d2e023bae65445316 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147497 Malicious code in rollup-gatsby-carpo-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7633966de8775550897762e490bf07feb82135625f1b6c5529663e41a0889349 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145963 Malicious code in parcel-markdown-pdf-cli-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38bd2f642c95ce6499d10cc1a6444484c3f22dcb601575c7c9e6802d2ee443d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145177 Malicious code in morgan-hyperion-hyperion-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2420ac58717c6d74276adbead23ce93969bbfeadd6e97f0845fe3f0c1fab2948 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144028 Malicious code in juno-leda-pino-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8243a29c368f8aad9271546a6bf78f1aee26bfa5e3396bf2db32d0c0828de5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149418 Malicious code in websockets-cluster-puppeteer-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0ceaad475d9d955f6b6f6dbade90cab89f4baf78f94279c6647fce157b11494 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142964 Malicious code in google-juno-toml-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c95295e519e35ecd2d623f7afac167f03d8dfb51ce411cbc4ef9c11a77bf1a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147180 Malicious code in rehype-procyon-tethys-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad506c5fa209f17fb6c2d1c69360e696d326b007be2923e5570d9e7913a54fc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148729 Malicious code in tool-bunyan-sagitta-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6652924b7c5dd4f3de7ca35faf7feb625b269bf18150aaa33440823825e8c9fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wasat-enceladus-rate-limiter-nuxtjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b15f38df4dd9bcd623e077041fd6fe4147a12433ae157325ae3cc9a4cb9908c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spinner-winston-procyon-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bed5c999fdde4bbc817fee2ff65419d8cdf9580bc8adca6e6021bd574123db6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vulcan-graphql-sadr-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b28fd7869c1e84447ed5bb31e1a38bd35e970545d9af54c68a3ce47e58301765 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139325 Malicious code in alphard-halley-run-script-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9f9d77e7486f19b392694db7b12727b81676372ad5fac67df6db7cc8e333163 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146288 Malicious code in playwright-wasat-sagitta-xenon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6025a9c4a34d28d5fef4bf33d34d36f5441114184959e734cd7837e43332f066 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139196 Malicious code in achernar-eris-halley-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb67b048a0c6e8814eae9316db3934da6078e2a0cd2b8227ba096492e3f4d96d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...