MAL-2025-144846 Malicious code in mensa-cosmiconfig-sass-loader-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfc4774c2b116959c2ccab5c6bf4747b653d6400e83e7a4849c1bf7bb83e1d7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148016 Malicious code in soap-cross-env-dotenv-parse-variables-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4b40f5873d129b069dfc467889c169b7f6211558d921d9c795476d6c125e58d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144466 Malicious code in lint-staged-start-electron-builder-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5e73ecafc9499e1568b2977d0dd9f18f353acbc15330cf67c197d36a5ffec75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142072 Malicious code in envconfig-csv-build-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa540d749d3bafec4df5a69032f942824402ebe3bf915276f5f9071e5251564c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146511 Malicious code in prettier-stylelint-mysql-ultra-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 346b072f90d39311114a92c9e9cd77f1a7d23ef5852c232fa6265d3263e30e4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146400 Malicious code in postcss-loader-mini-css-extract-plugin-development-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06bf6d7f07b3ed2d9691b5bcc6b10f80b6a8691b343b4cc3ba50758e2edf9632 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149037 Malicious code in ursa-aldebaran-phenomic-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc5c6621dece89a79d48ebc2def06c13ff71335411f1e0cfa6ce6b1ca559ff99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144450 Malicious code in lint-staged-dactyl-optimize-css-assets-webpack-plugin-less (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90fedf4b2f7d5f9c62ab838cb326ef31ed83b2bf95b02afbcdea9f615c976407 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140995 Malicious code in commitlint-triton-less-loader-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 359f28fccd67ed92da7ca0e7b2618ad8b2231c15a5d76882a1f4682b81ed5219 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142325 Malicious code in event-spica-gridsome-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6f0c6290eac850e1d6c4cb0fc81023c3fbee17e9f5b5395d1c16f9dc4ec4e83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148711 Malicious code in toml-hexo-xml-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c816af0f803870e47672c841645b4a3a9fe5a554904a699390f8a94b5555ba9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141718 Malicious code in dotenv-parse-variables-dotenv-safe-algol-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdd4098cf7952532438e0fcee118c18ba0061965c413cfe88a091ffe48f76af8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139006 Malicious code in silent-maroon-seahorse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d342cfb1987492d9e7393acd466c73c662083385ece71ef299510ccb7f393ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138955 Malicious code in puzzled-olive-deer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 000b44c3eeb8c6a0e1289b0d1f78123ccdfcb7867e1241d926793c15507041e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-sambel24-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2135a84cda64a09dd0e4e91546007c8a8c02d203ea39cbf69ade73e6d052bfab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in coloured_lizard_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84ef82da051f42732b4f45ac064c5f0d91fc390e89f37d70c919e20154959b05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-buburayam8-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a49a6b973bc3fd8765f5127c65c9a40c3ae2cb55895502c1245ebbefab9ba00e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dono-gepuk2-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2c33b4ab98fb415d87058eab52ab1e77308d29d7bbd08c03e97c768e1e3f5d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erick-sasag89-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6084ccf6ee75b018e4bdeebcbabc979220cdb91bd21f260acf48f7edd5a9296 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-tiwul81-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c807748012d86305c12551a46cc9830de07db42fb77111f0b928e723bb542780 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...