MAL-2025-141877 Malicious code in elara-hermes-element-ui-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28265b9fdb68bcedd5c210e9a0e16a40251eadf6018250aea47df9be29877f80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149154 Malicious code in virgo-farout-cygnus-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f515381d2ed9b5123eae6a36d19639f2221e8136e2dc3aaa2fd13e12ead6baf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144236 Malicious code in lacerta-deneb-react-bootstrap-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ee4a9712b532e871f7b4ddaa054d992da7855fe931e1bc6d0a47c71aa8e651e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144943 Malicious code in meteor-xml-equinox-mini-css-extract-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83078b1301d20295a327893bd0655755d15c5a6e7d68e8152651023943e274d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143502 Malicious code in hyperion-wezen-gatsby-elara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b9a5dacd1d551aa631da21bee30bcfa94538b09ab68a48ce915dbd65fad3a38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142324 Malicious code in event-sedna-elektra-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7aaf62dc662a6d8b1068d1c49bd2b9ec972d870646a3b2987a8882ceac957b65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148724 Malicious code in toml-uninstall-acamar-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b3712e1a9327cc0b6123842ab0d3fd495b50d3e0e9e098c7eeaf5593e748799 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146192 Malicious code in phoenix-achernar-nightmare-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86f07447b95996044d818408fd7d4494a3352f8ff4efff391f36f14aebed84e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146821 Malicious code in publish-vuetify-deimos-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9d89e84ba3999cf4d7d7762e710987dfa5c78b6051344f073b857dc382f4fbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148102 Malicious code in spawn-mensa-nestjs-mini-css-extract-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd4b5e325e2cfac082460dc57cfc4b2006f296c9dd1b3b9c7ab233de8f93398a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148674 Malicious code in titan-chai-heka-lint-staged (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7e8f2fed5c2b90a4dc02ed95b7779ca58c2be25e2092df0e018b44bce9f349b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142358 Malicious code in exec-phoenix-miranda-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2842808b820c37812483699f3b3fff8758c6e575559f4695d4506bbe93b9f825 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144278 Malicious code in leda-koa-dotenv-safe-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 808c73d9e9f389030423bb79948118805a5bdf318cf7822ce009acc6fb93fa32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149781 Malicious code in yakutsk-wasat-astro-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b08c20be557c34929f5df6c7e5cfcceb8b208ffe3d9dfaaf04557cee7aae0a1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146959 Malicious code in quasar-remark-csrf-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8c25189b3a691795423dd2332b3e847b1d49d056a1fe6b209d2b7b7e86ccd0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cypress-nashira-configstore-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f999615a168d940bc06ec8874021fc66e9f184b6297172eedee98c7b53573776 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143803 Malicious code in janus-configstore-quark-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4b29671555e93fdc9ad7382438d2ddb9778094ea0647da33556c9a852b3c137 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mocha-less-loader-axios-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48bba08a828bd8ae434fdbe2f07303a911d202385632eb1fa95adf5361f03147 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nodejs-quasar-gridsome-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf553b747a0fd06cff0c865d887c89b2f7bb1b22df3817b395eecf387d96b958 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in octans-mensa-public-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c13e568f7a5b0b22ad6c893e61262a0f930cd561b8640a831a4153fa174e88c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...