MAL-2025-147291 Malicious code in request-css-minimizer-webpack-plugin-resolvers-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c589217cfc86f7c8e3f88b2b6a0e481940efe817e8590641395b29878ff94cd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144903 Malicious code in meteor-comet-mdx-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91345011c2e3f2e2353808a4c3cb3c3b00b13cdd534a1c0c4d88a87b9582e6ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140360 Malicious code in canopus-ini-carpo-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cb5be968ca0d94f6e02b8d6c96a37621dce07de08d5bde7184663b619ec78cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146851 Malicious code in puppeteer-epimetheus-socketio-reveal-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e589b09acac44a8a6465503637dfa4fa380c7114caee9f872ee4a68d596e3acf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145666 Malicious code in nova-reveal-md-equinox-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8f77ba08f169f2e423eaa7961c5975b6287c4f39ab74efbe97dba7ff08dd69b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143564 Malicious code in indus-fork-rimraf-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa831a89833772caceac7a6c6708f1dc1efc4af5b76d2e7f5c29c49b52d87fbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144411 Malicious code in link-jovian-sedna-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4e11422ab4f0bb7873a8e3f4819ba7fd1b7e992231e1068d7521d05a91b9bb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146864 Malicious code in puppeteer-sequelize-link-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d360f07a2225871e32929218ff89e68144d850e41759c5c8675232cd34d9e62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141312 Malicious code in css-loader-procyon-promise-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcd32db1e172bcaef32471225d0238324fae546aac899d0d778a7be7bbea29aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139961 Malicious code in bellatrix-upgrade-janus-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2af42ba641fb995fa9c020ea3091b0a83eb23c4da82f4514246b7213bba84c45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149586 Malicious code in xanadu-async-prompts-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed5fc19090c0485f4ed4364f6aa000cc1dba19998acc98c7de95fb08cb3b9b70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147514 Malicious code in rollup-plugin-europa-loopback-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05de200db7e515a5961d1eb057ffb24b96548093bc9c24b3d1792511a3fa58ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142803 Malicious code in ganymede-impulse-avior-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c52c9c3522a9ca15fb4298b8c67b9fb8f2f0f3e6902c6478854c8c58a1a78b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143047 Malicious code in gridsome-oauth-bulma-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f07451b678a3fdfbd18a8d0021a392029d22dd35b437bdc15c8d3c07a3555463 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145205 Malicious code in mui-nebula-gemini-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0997b9321571e9cd41dfbf04b6b87f0ca2550c498b2cd413ea4b5f0355f24d15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143492 Malicious code in hyperion-norma-lyra-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3c9e34bcf1e3c5b6e4923008129abe4146826a6a6147d34d768d2ea843dd9cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142886 Malicious code in geckodriver-uninstall-husky-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7a2b7f6230965f27a6954f78531a9e677cb5f7407f313086cab21ff0979a6d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146796 Malicious code in publish-nextjs-halley-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f79f182e64fdaab08e0712c8d14b93f0074ad61ed9b5a6edcbf3f506b35260d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141505 Malicious code in deimos-sass-loader-quark-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52a22eeaf7193178e07572505c50525a46448c1593b64c2716457af244a18411 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142945 Malicious code in global-nuxtjs-antares-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3fbe6a0139f93fe7eb3f20cb671d10dfb136b047d88376d204c1af7a02cdae1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...