MAL-2025-148930 Malicious code in umbra-optimize-css-assets-webpack-plugin-radiant-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c3a485ba71bf8141e3c611d37b28d38f948007f335340e0dd9e887ec7be1298 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140074 Malicious code in bootes-deimos-tethys-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bf8276b237457929553c4b5e28b51cc0edc14043dff26620640248f1d6fd96f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140797 Malicious code in cli-ganymede-markdownlint-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f45a229869b86e2b0dfaa4ec720323de49cc23649bd8f85575228616c9843dcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140217 Malicious code in bulma-link-vortex-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43647bfa144b5aaa124e69aaa2e4b77a1e9c17269cabbcdf9c2ecb491450ab45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146590 Malicious code in procyon-element-ui-uninstall-less (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5c9482de78b8db351be096255e8d470475ac1af6f9f421925c5db2d0e149ddd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145897 Malicious code in ora-sagitta-callback-markdown-pdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba9c81d2bb8c6f1c332c776aa288b4477a56e5643d1ad352582c4f0f7f61f6f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144533 Malicious code in loop-sails-commitizen-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c4f60ba37c31708e841a18d02c5a96f5764069dd2a82bdab58f42782883cd4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147342 Malicious code in rest-colors-xenon-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aea9c8aeb5c94be268f5eb954b7f3da9be1607c0683a980ae34c42e812feb1dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148299 Malicious code in stop-node-config-zenith-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ae899ccb8291de7f8de581daee9c0b626457329723065edf32d96a66cbaad7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143362 Malicious code in html-webpack-plugin-ganymede-test-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ce127dbafb7b36a903aab9a8dc35f72cf667d8a39356eb117ad682d276e7a0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146950 Malicious code in quasar-geckodriver-got-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07f1df05da16c6960d3d2977c6fcabd9d256fd3297e8205bfca97b625c6a24f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139460 Malicious code in antd-loglevel-triton-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d1fd01320a90acbedaabde228264716f942b3ba95713dbc21b187caaa492d57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140292 Malicious code in callback-adonis-native-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc6b2adb2024fc786ab7d03d9c9e3da8107a9c830bea338dd0148d6b47c1e442 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142269 Malicious code in europa-google-typeorm-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 646c3cbb9826e253ae7bd67a3f6e6c0faddb21b017db2b59cf241dc532bdd262 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149056 Malicious code in ursa-express-buffer-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d80a167979bbebdf1747a6f8b1c3dd693c488a57b5fb438a0218ac2c54d051f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143397 Malicious code in hugo-react-bootstrap-nestjs-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3afec8441ea00da53d6434b7d12ff98efb7ce3e538f9991c06c260651f60ce95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140782 Malicious code in chromedriver-relay-sirius-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f007104bdb79cb21abcbf80450b58281ce1abe552ce9331e05018b461a34546 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143020 Malicious code in gravity-centauri-helios-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdfd1d46cfb1e79a472555538c03f5c65bfa51c324508eef833111f42ef5c741 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146624 Malicious code in procyon-wezen-europa-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 487233a3540f52151026a645f3a2bbe4476b8881847bee5cbf1523d913320717 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148724 Malicious code in toml-uninstall-acamar-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b3712e1a9327cc0b6123842ab0d3fd495b50d3e0e9e098c7eeaf5593e748799 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...