MAL-2025-143234 Malicious code in helios-html-webpack-plugin-colors-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15ca9906844a152840e647de99226967674d883cd6fd3e8fa73c798a11b93d04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149671 Malicious code in xenon-warp-luna-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9ed97c2aaeb7c26b8e9eceef631438c73865ab60574f693b31a7d75e2709ba7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149209 Malicious code in vuetify-fork-xml-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 683777ffb6a0d2d4ffc0e742ec2bbcc49d9709fcb03df1612896d9e53e07165c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147663 Malicious code in sass-loader-chromedriver-atlas-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afc8eca7c38080fbb463c3fef2953cb87fce95338e8574846d4a53c9f715036b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in procyon-zephyr-antares-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5fc30b7ed93f03ab4d474b9ccb3e1d273e2a48d3f0e8f5f2eaec982ddee396c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-playwright-ini-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed04bcab08314eefd54ec25d25b978908a323fd77c17eb836416092414d907fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147805 Malicious code in selenium-hercules-hapi-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76a93dbc52222f7b0a214d14b4605326eb5080c043234c729e07c3340b0436b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143453 Malicious code in hydra-rigel-eris-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4adef32e2364f5be0643d6106947034e89ec1ba298813e0586f30b5f14545fc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146560 Malicious code in process-nashira-alphard-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d892e0621ffd010621c749e7224836ac446d06f96c997e37d0d3e3eb69033e4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140359 Malicious code in canopus-hermes-postcss-loader-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64932e18462641061057f9a0061b3b7e8ed093628d7603b096014c31006ad72f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenos-unuk-version-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08758c756619b48eebbf564bbe8c20656ed77a50701a913c3d2bb123e47c1313 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142359 Malicious code in exec-publish-fork-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a71c92771c825f5e91e41b1fcb1c89a8cea694ff25a8e4a0db76b1a37b2d697 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141242 Malicious code in cressida-scorpius-prettier-plugin-markdown-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a773fc88c2d9b6ab604714c0d75d5111b14f44c40a5b5b8f98e02f191aaa20ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145930 Malicious code in package-framework-aurora-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44135da237402e70463e6e008d386a3d8e5fdfb332d42aec2bfca56a26a89783 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140060 Malicious code in blitz-solis-mdx-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eac0a972116745bee47e642e59aeb49f9ef45e7048afbf60a8face542146c8f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146197 Malicious code in phoenix-json-markdown-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7880f03c4f17c08b093bf7dfcb7a59a5ad90b3d3c77a715a8a9bc408fd2ca56f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in server-astro-publish-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e83cd2758dd0aac6c01e758c20525f18a2e37ad3a0c7a149db689bdb07e720e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in event-sedna-elektra-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7aaf62dc662a6d8b1068d1c49bd2b9ec972d870646a3b2987a8882ceac957b65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148184 Malicious code in spinner-adonis-jest-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8ce7a252c8fb466cb202f8d2441a363fa351a5ccf8b69a0cfdd48a0238bb6d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141228 Malicious code in cressida-cygnus-commitlint-config-angular-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1141bebb30cede52e274e8085246ba2bf01af23cc1e83a43047a2bc8e1ad55d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...