MAL-2025-142054 Malicious code in enif-middleware-bellatrix-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9127fd7d76d0f3c78514f671964e2d7fb10b763951b5f7d131a4c1811348a583 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149759 Malicious code in xo-wolf-perseus-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fda59b09340bddf64be7b10b456fbeef410d7c32413ad9d563d889dff6205b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149729 Malicious code in xml-ganymede-apex-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e0d788757c75f0a67b9a6b6bc0cd600a9ceafda0091cddd81a49848e205f5f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144987 Malicious code in mini-css-extract-plugin-pino-changelog-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3bc3b096ea1cce54a22723ec725ac1abb7d37238f0f9e96fb9d1bb568c06d3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147503 Malicious code in rollup-mui-canopus-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2da036f3d7323a4315db349f89af20737016fc10490dfc341a138c1357c5b785 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141705 Malicious code in dotenv-csv-jekyll-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f602ea5a4d3e70788dc52fbd3fcfd4afcd27d68f5d379ce7818d10fa011db3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146789 Malicious code in publish-impulse-package-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 195a18bbc2c340fa49445c8f98d48a8db2dd0d999cf1608f8d386a97d2d7cbf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139412 Malicious code in antares-grus-mui-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93fa3640b096ae2e82589e9227198165c847ff2cacbc724947ae2a8a716cb59c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148858 Malicious code in typeorm-superagent-leda-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4647d217a21dc4cef2ad4a2cd3d26af951f19772cac97e0e79ac9d23abdf79d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eris-meteor-dependencies-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c16ac3e6ae7e90a0087a8a38f3156c3bd5a3d49c09f8f8e770b9b6508b164fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145057 Malicious code in miranda-sagitta-package-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94593febd7aadb0e0468641864d190fbd3d0a0ae43e07650fc889f6a630caff9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141418 Malicious code in cz-conventional-changelog-eslint-config-server-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50e3969b8ec88d2889697f34d76d21306f4eccf27e7802b4fe056dc0fd3bac7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146552 Malicious code in process-hapi-luna-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bf15fffc83e236734502d0f4a17fc39d868f4cc7097701f1d86e3eb8baac713 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141262 Malicious code in cross-env-optimize-css-assets-webpack-plugin-dependencies-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f584af0f6b2d8c55e83c6ece1901ac4ceacd719853a62846ab4d14f8550a18ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141268 Malicious code in cross-env-restart-ophiuchus-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02107644150263cb3d55bedb6b19c1c298c98e216e840814b6a277bdf849f060 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141018 Malicious code in concurrently-ursa-betelgeuse-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d34cec0f8ffbbb35058704f59236fc00d2feab74e455c018f7971f2d20d13b78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145347 Malicious code in nebula-meissa-shelljs-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfb81e90c76d751feb2f2117f1826265a6d23d702d9560c78ad944dd9b7a17ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147681 Malicious code in sass-loader-package-sync-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 213c0e72ea60961545ab67de0d5464389a77c618512fd25cfd5a60dca0a0660b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146821 Malicious code in publish-vuetify-deimos-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9d89e84ba3999cf4d7d7762e710987dfa5c78b6051344f073b857dc382f4fbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142171 Malicious code in eris-eslint-plugin-slidev-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0320e0d702a39f689225390ed9c2d557b760f8f092af53cc00dbb747f1c95c68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...