MAL-2025-147217 Malicious code in release-it-blitz-colors-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf7be65363828d3ccac66faaf2be15e85858adb30d104154beaf697d65e0a711 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148289 Malicious code in stop-chakra-ui-html-webpack-plugin-uninstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24a04beb1d94e9aa6142f6535b0c0dcc3320aaeb6a53e45353f3211d6f345730 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146245 Malicious code in pino-pretty-webdriverio-sails-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cb71cd18591ac42686f98b32821d8f499526454701364f53578840deea6ebbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141898 Malicious code in electron-builder-cassini-mutation-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79c648a482459ea26d4bb14ad6c78bc2239cae2bfa383ea0e3e3e77cd231d0c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147152 Malicious code in regulus-nextjs-chariklo-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d37f8e254bb80afe443dd1f2073de683b7d930ca6ecc89c98dab8633f4cf6142 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144984 Malicious code in mini-css-extract-plugin-ophiuchus-lyra-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee149d2a64f1d6e8ddd300e94d9454e3a8e857f650f27a40fc08e1c517eeaa31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143286 Malicious code in hercules-husky-blaze-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64ed5a2f08116d37357f8074fb85d6e54dda19d5bef3ebb37179a4ab84fb0733 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139789 Malicious code in avior-upgrade-frontend-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b82629c5437f4b0d4c89ab021f789b978e879e95e377e702e4c55f994b4e888e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146234 Malicious code in pino-pretty-hapi-solis-markdown-pdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c674bde158ddefba91c9d567868a8757a09867e88fbb79e9ec1e442218ce0717 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145879 Malicious code in ora-dotenv-safe-nodemon-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5f5ae1a3c4741db4980aa3500c4358afd09c3b49bde668079c555bd0fe85862 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149553 Malicious code in wolf-nuxtjs-mira-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be3258b064bb655bb212c29f171951d33033c240d6fe5dd0b0bc92e9898d2678 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143727 Malicious code in iota-helmet-express-aurora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42282ed6206029f07bd399aba888e5b4efff6d0382970bd2d500ca5c6b392656 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitlint-config-angular-tethys-gridsome-terser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcc556fd03f18f1f23f95f45bf62e5e73218498f5cb23470df65b0870ac949ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in version-callback-husky-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8176d823b539f44960e3f001e364010b73dbcdcb7449320d72a3472268eb79d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apollo-sails-vuepress-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2600fdd1db616c71ebd3fbd09b07af44dc86936736bf6eb4e5b68c0bccf269fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in publish-xo-deimos-xenon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61576b26cc1474af144dae38e94de3ac5b2ce86a3ce05623d73f220d871368d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gemini-postcss-loader-typeorm-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e26d098f2acbda848cd498a85e44bc66024352bd08b5b37b1056b8c449562648 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cosmiconfig-dagda-spectron-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d15da11dcab2c97a830321269d01c33701a2e1d1cff07879d25dcf563eb8a7a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carpo-blaze-dagda-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d31a9474f1df423ea3245ee9303658654fd965f51550e15c0f71eb5b195443ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vulcan-init-pino-pretty-geckodriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1f8344d04ae5521883f7f79bbe97baff5a334a93ecff03a3abc413f5a49e990 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...