MAL-2025-142582 Malicious code in fork-cordelia-gacrux-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d5df5ef2b61b37688c2f55bd46a28cf1c268628a6e43f3c21b47bcd8b8596d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143313 Malicious code in hermes-css-minimizer-webpack-plugin-local-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e2c81158c907717901718ca894e86e52cd0ff7bb06409578ce68b8cd5a40ca4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142072 Malicious code in envconfig-csv-build-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa540d749d3bafec4df5a69032f942824402ebe3bf915276f5f9071e5251564c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147821 Malicious code in semantic-release-backend-scripts-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe3df3fc402b54693afaf15ba26eee4688a1020285588b66a7cf0e0431a7f767 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146400 Malicious code in postcss-loader-mini-css-extract-plugin-development-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06bf6d7f07b3ed2d9691b5bcc6b10f80b6a8691b343b4cc3ba50758e2edf9632 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146211 Malicious code in pino-config-equinox-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17aa811e4bc28823c81687216a6cfb9113a64add17518fd01d8bd0704f69b3e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142563 Malicious code in forever-barnard-style-loader-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73f68bdb51fd979c6a46b6e31460a22991df841e08029da5c687d6fbef3a4e92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148694 Malicious code in titan-tailwindcss-koa-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffc07afb489f3fefb44ee960e27915b773a85eca1cca9ffa50c5c027d2283e02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141371 Malicious code in cygnus-jupiter-markdown-pdf-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7edb7d85694a3c456255640009a7fe882ffd52efbc00bf4ee4c78c1d16712c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in event-sedna-elektra-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7aaf62dc662a6d8b1068d1c49bd2b9ec972d870646a3b2987a8882ceac957b65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142482 Malicious code in figures-semantic-ui-cypress-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ece749ed6b3a6383fd5539ce53e0778c8e77de27ff7db6abaf98171a96c22cbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in got-jasmine-zenobia-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dadbc22d6c22338cc6fc5058d13df1e0f881a222c8c88cce245321bf4480aac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-enif-webpack-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1ed194f599f2836a83fef2b6e825f59f54b15e81de0a8f75e18e895572a8a4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in toml-cross-env-private-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b88c2a543087cca637adc9f032af927567a7bb085fe36740081d91beae1d477a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gacrux-phoebe-graphql-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f68c04258710a2b6f395d4cf50b5517baaf63d917dbd72a928d9bf32e8bb1ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-configstore-regulus-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b41feeb09f0a84aba33cef6885ce6d13ed77111fa4a690bfcfb8930d9d5d13ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143826 Malicious code in janus-phoebe-frontend-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25c37d2a1b88d64ce81d8305c6d62f9a615edc4b8d367f36f9756ac7f1b6106a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148077 Malicious code in solis-husky-gacrux-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47e3d4d871f4f969cba5282084ba6d4668843d298314b57516e622809c5616cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148016 Malicious code in soap-cross-env-dotenv-parse-variables-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4b40f5873d129b069dfc467889c169b7f6211558d921d9c795476d6c125e58d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147163 Malicious code in rehype-auth0-superagent-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e0608a928572c4b7bfb6946da1d1256c1306c074a7c2dfc451c142f079b1e49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...