MAL-2025-148827 Malicious code in triton-scripts-cygnus-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2fc611d6b7568136f908c9acb21ec7354043b45aff46b45717181224ee13010 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142502 Malicious code in firebase-materialize-morgan-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c444fbf2a36d713c252f259fbddfccb959e738bcd08fbe47992b6bdb5d7ea552 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144795 Malicious code in meissa-bunyan-loop-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa2570039e57cef0e6475a2bb439694e2b71ad50221717be387abd3674716b11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146405 Malicious code in postcss-loader-pegasus-registry-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da724633e0b2627cc47e764d76ffc267a948d6191d9f6aa6ee8f491a9fc1e9ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rehype-spinner-wasat-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3c2c259413755d91ab2d7887a4bad3620fb777e89d8391c8ead79364d62b8b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in despina-nightmare-grunt-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76b9929aa7b277334fc38d873c4779114970d886db7dbfc06272eae08e82a285 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odin-ariel-superagent-impulse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca853f43538e6ccaf35faefcedd77f689550d06c97ab07e67480f13aa5f446fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149056 Malicious code in ursa-express-buffer-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d80a167979bbebdf1747a6f8b1c3dd693c488a57b5fb438a0218ac2c54d051f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neptune-zenith-fornax-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fc16c35f2b64a72374d593b62f1cda83e549ee73acf82c0f8f8c58a534267b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mira-global-docusaurus-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19bfcb6442d80637c44c046ad152f6906b1d7c2c9c003ffe0801fb69f3354a97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in global-writable-hugo-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dd6c1658045523dd6514bb6c8f1206ffb8dcf071d21dd91e3ec9d33894ae98c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in virgo-cache-chai-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afd5e75f1dc520c9e3c5527da3ac7c209be59d8b37027452fc635b60481ef591 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nashira-puppeteer-eris-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acdb15931322ad653a80ba6c10832d92347944ecd041b0e916f5d0d8ecc2e626 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jasmine-quito-lint-vulcan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22e3ba43d0877d7582fc2289f6dea6ed0681e495e93c77c1aeb965181bff1279 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuxtjs-prompts-venus-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 099ff1eaceb6ff93a26f3e4896f3492526122cbb96d49d532a67135b00209a66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in terser-webpack-plugin-fork-dynamo-spectron-webdriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 059022a5e2baae5c20ba4abb7e96dc0f745db65935cd63e383ee4ce4e3e868a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bulma-blaze-europa-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2187e3df5f25fa89e7d582ad2b49cb8dd54a88d1dc8b42e7694934d80e7d5b99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-cluster-cypress-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 637d53ea4287f7af8a63ec76245b34257bda9841fb3c7c973f50572c1f7328c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139444 Malicious code in antares-uglify-js-child-process-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 101a83ce1b47d6ca195fd753246395dd6d373fd39ac9b2d8551b942b35b0297f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rehype-upgrade-npm-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64e59d3349978c49eef4c99a61852603a8d0312ff6a182eba2bf50e696dd2af9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...