MAL-2025-141180 Malicious code in cosmiconfig-firebase-warp-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eee21f35eb9805d7f31c7f493c82f906f9774634ec1b223e8d3c7fafec2331c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149189 Malicious code in vortex-postcss-loader-auriga-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d10ce1ac30588bafdfef6bef36489e659c355f7c931e391a7ccbe7e2dd3712a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147163 Malicious code in rehype-auth0-superagent-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e0608a928572c4b7bfb6946da1d1256c1306c074a7c2dfc451c142f079b1e49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143744 Malicious code in iota-triton-writable-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1439b571c88fef6fd5907adc4a1e16f9fb19de36f7e8ba79622ff79a3c34b79b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146343 Malicious code in polaris-galaxy-dione-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fe89b18978b330a37b7d1dbdf56eadbf5e873ddc9b39a4676a80187c71923c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141012 Malicious code in concurrently-rollup-plugin-pino-pretty-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25fe62b6fcf916ddbab500c08a99898ec65b9eb1a259f6363bd0e30f51ffaf86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146728 Malicious code in proxima-playwright-callisto-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2488440f05aba5c3a89637e1d59dcff2f15bd876c0782bf4ada4b5462f82c989 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147013 Malicious code in radiant-development-eslint-plugin-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 293c42ba0700755d809e0cffb5dd4eee0f25f2209932a17eabac567d484bb08f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140995 Malicious code in commitlint-triton-less-loader-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 359f28fccd67ed92da7ca0e7b2618ad8b2231c15a5d76882a1f4682b81ed5219 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142776 Malicious code in gacrux-octans-install-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f459054cf2b975246d8f9f1230a9f2f32ab9a8cee1ebb4b00938c60accaa03fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145710 Malicious code in nuxtjs-polaris-google-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70a059d4f6f8befc217803d2bc110b92360c80662b5242c31399896692d4dd6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143406 Malicious code in hugo-tool-ignite-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd6de72519d8b5e933f1a81fc3a4e2a4588141210ebaf18faa2e37aeb8b7a0c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139006 Malicious code in silent-maroon-seahorse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d342cfb1987492d9e7393acd466c73c662083385ece71ef299510ccb7f393ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138955 Malicious code in puzzled-olive-deer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 000b44c3eeb8c6a0e1289b0d1f78123ccdfcb7867e1241d926793c15507041e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-tahutek2-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 227cb873c57e1eed2eb867288f56c799f397506eb0d2f92cfa7802cc20874705 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-sambel24-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2135a84cda64a09dd0e4e91546007c8a8c02d203ea39cbf69ade73e6d052bfab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-nasi97-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19d66f3a20d5ae128a908867eea2154d7bb72f07a53cd2d58b39698f00f2016a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-buburayam8-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a49a6b973bc3fd8765f5127c65c9a40c3ae2cb55895502c1245ebbefab9ba00e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putra-tahutek9-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f9364fc9b3752ab0a481667a0de265471af9936bab820ebc0920b8808216bf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-gulai63-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c56816dde137e6ef985ac0d96432f2dfc515e16719402ffa46c5b30b3283823c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...