MAL-2025-149545 Malicious code in wolf-cross-env-markdown-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bf92b6b8c6a2644f72700eeb3abdadd149b76826d296338e032bf88f95a1e0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148808 Malicious code in triton-build-cli-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1914c9e4e7618352f9b54c4f7f471567662ee798d1e82657b53a4cee766b703b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148698 Malicious code in titan-winston-commitlint-config-angular-elara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 129fb702d4c17a8cadb39c9c2e95434509dad7fe2d7c1502a86ce3a8386bc6ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141712 Malicious code in dotenv-parse-variables-castor-impulse-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9886a1cb7d0a2d8eca7761b048b1101fb32a1a735646becbb7e5445a2bd2e4d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144205 Malicious code in koa-request-backend-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08921411e6ecc93fa3ef8d34a42907e38e7b700460a3ee414b6b545798b2915c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142808 Malicious code in ganymede-luna-solis-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2bba943fa330cdb3d3878a5ffc09d78a6df573ce8fa64f6f6e36f25fcdd1d8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141033 Malicious code in config-meteor-start-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5f41c156800172217496004b04bf2c1dfd2ae71f2073b0ed785b6ed6984b299 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140735 Malicious code in charon-spawn-miranda-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83962d261eebbf4ab11649fd1ce06459f1df6412b49989eeb3d2328aa7889690 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145381 Malicious code in neptune-stop-semantic-release-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 854d36ed66287193682ff19d42027a1746c092392f6048ce77b2adf23c3031f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140243 Malicious code in bunyan-heka-spawn-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3db5614c01d3e27e5f9eea4ed9ba6041855f567bcb63abe84b582e58f8116e2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143656 Malicious code in inquirer-publish-mysql-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ab591ad24678b614fb49b9d2e1419c4f33408b39c1c8d139ba56bba953149d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143754 Malicious code in izar-corvus-babel-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 770838708355f690eb1ad96419209ef3c6b86594e8fb63af218e0f9fb75277fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147215 Malicious code in relay-zenobia-webdriver-mocha-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b73afecd50bb21b7928b5f8587d1351cbd5098add2bfb6907d1b41a98d919828 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149114 Malicious code in venus-lyra-fusion-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5a721ad8bf9d0f97cb49ca80516f83abcfa1f369087036d75d569062d51ff5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139370 Malicious code in altair-ultra-grunt-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff770cec8eb98e87d441bbd3804ca0cf7dee5cf9ea569733a7a118df8e241c11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145763 Malicious code in octans-blitz-meteor-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a4371531f66e76c21381869af17ca3e23ae3771e2f22bc30ec2763d6dfe81e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145589 Malicious code in nodemon-odin-yildun-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f93fc9caed39a985ca16d0832f3a06d17ba8a9921edbc0485d93b77f665db149 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140993 Malicious code in commitlint-miranda-express-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e6c9729e5c963e5d34a195722b7e5ab7ca83819c63665ef44c1069c6b8d8b7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142087 Malicious code in envconfig-triton-perseus-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 868015b1b813739061cff576bd6f2c640eb715630e7893b555ca36dfaedef583 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140088 Malicious code in bootes-postgres-module-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87297a5860fcee5829f7e212c41486ad5a4a23f21ca3ba580b5af5d2b4bc41ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...