MAL-2025-149614 Malicious code in xanadu-virgo-meteor-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c761f603fa14ef1f4f2c2a192cb03b28359feca4a70d4e702e1fadd8d0c5e5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144746 Malicious code in materialize-materialize-mini-css-extract-plugin-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bd756c9249743cd040cd2ea865ff064a8e93249f95f6c5a86941b003c255727 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141583 Malicious code in dependencies-schema-enceladus-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c610954fb474023a819aad12235c36c41e5d0e97c1ca880b9f8d8e01821fae16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145289 Malicious code in native-eslint-plugin-style-loader-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 695578aca503670b9eb6a321181bc50f0975204771e573cde2aeddbbde25ea65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140478 Malicious code in cassini-uglify-js-terser-webpack-plugin-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21ce09785669244e7591203f571d73f65427bc99ebccda71d751eb0a498be0e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147967 Malicious code in sirius-pm2-sedna-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 674c13b5f1d11191da77116b519f11e1a910d57f3667552ec4027ad75f72609e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142253 Malicious code in eslint-transform-terser-oberon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbf293f06ba8e34141c8b54aa5f1d3b141f1df1fccaf11b464aadbdd0e4fa940 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145971 Malicious code in parcel-sedna-react-bootstrap-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae09af36af178a81acf4d4e93bc643df245329f487f8538f7c695e995af2c730 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144823 Malicious code in meissa-phenomic-eslint-config-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d35422d94e1ac252df95e0980b4c94d42775dd5e54a3127568226091095db9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142647 Malicious code in fornax-pulsar-phenomic-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5bd18961a6749b1c841892122d0994deda449769618a1ce0ba23e402e00ed23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142784 Malicious code in galaxy-andromeda-non-blocking-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 678b2e974017bcf36f02c2fed64b410c56a92866b5d5c133e7e13bf7dab166d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142139 Malicious code in equinox-xerxes-convict-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc8a218e391950bb7e213b36959360050fc42140f58484814757055dd9ca5a3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142400 Malicious code in farout-castor-publish-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 430c0c3a43774fa4675a64b073047be943c2bc19aa6beb0da328c2142b6c82c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143985 Malicious code in json-umbriel-orbit-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d3b29923bdd6d0016afad2d219a67c133528e65c02956f723acc4acf4a7e49e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148444 Malicious code in tailwindcss-iota-materialize-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8814d15fdbca9a55d84e73b3267423a3ce4f89f505a49f9cb4f368e08ddcbb0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144938 Malicious code in meteor-standard-xerxes-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08f7a05cf55a3f259e19fd2c4fafa2fc5bf3d5d7d3bfc1d8abf65fc3790d2bf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144406 Malicious code in link-flare-loglevel-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f4bc63028f7bdf21b5dde2af04c7dc1efbbfd1ddf8c87aa557a35e399bcf6c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141334 Malicious code in css-minimizer-webpack-plugin-transport-spawn-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4726ae38cccfb92349767aa6eb73f557bdef28389337380ecb62004c3fa5514 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144702 Malicious code in markdown-pdf-passport-webdriverio-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d30cf25fea46387169a2ddaa6718fe8741c9040928feaa0d19f700989e189e79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145121 Malicious code in mongodb-cosmiconfig-impulse-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16aedde5124299a67704ac06f0b0969657a4ac78522a0130621fa3344d627407 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...