MAL-2025-141328 Malicious code in css-minimizer-webpack-plugin-hyperion-websockets-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00e20a22a9c22769398e8739c99b3cb32ee807c0d7b81540638278571f89a9d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147825 Malicious code in semantic-release-fornax-xerxes-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccde657a05676a3e3b9f919622689ae943a012f86450f132569c5866c8e60b78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147612 Malicious code in sagitta-publish-npm-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28c7fc955c277c3de9a6cc9a4bbef4982f2f62079dcec8f17b305ed1db8ba22b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146934 Malicious code in quark-process-schema-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaec4fe47aea0991145f9198831818cd8927acd7ff0779d6a8a4553a3b0018f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143516 Malicious code in ignite-jabbah-betelgeuse-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 734c268affc6d7f5da7fa0680d589940b9d8422e85a7f8e6f351d7c12b52689a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141477 Malicious code in dagda-mini-css-extract-plugin-ophiuchus-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c013602c546a941cd797235368c91bf64594bd013390e347270c00560b5077f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141209 Malicious code in cosmos-metalsmith-lint-staged-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18e47d9bb19bf1f40f361150bbbf6dac55e25b74451e6e9a059068e2409af1b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148729 Malicious code in tool-bunyan-sagitta-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6652924b7c5dd4f3de7ca35faf7feb625b269bf18150aaa33440823825e8c9fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142163 Malicious code in eris-blaze-pegasus-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 649ba8e5f1092cb16388028b23ead6b8f6e1199fda7ac9c199d2088db3c03feb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140271 Malicious code in cache-galaxy-titan-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b41f87fbda362c14ed0d2ce294e7042bd6d3b72ad11ffe6d1fc90a4c990cf9eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hapi-impulse-dotenv-parse-variables-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47665784ad522eb04cacf6b2f03e8ae0ac57786dd4012aa6cff0c9b286a13ecc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148621 Malicious code in tethys-helmet-markdownlint-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7dd146f8b14178ac1a675fc49a5c08c881775ce18fd6b985c364ac18b26bbb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mongodb-cz-conventional-changelog-mensa-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e1a7faf3baca9e07a6ceaeb3feeaa18038e6016bc1bbac64f91e7ba751f4722 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spica-airbnb-elara-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcb76ae4eeec1a2f7bc7fe57267d070ef2b92d9cbdd80fc3b3e0c85b63ea367e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuxtjs-achernar-sadr-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca69bed6f1ac5109bb281b861bd2e93d1e31ed3f606518daff1af52293e8b111 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in orbit-uglify-js-jsonp-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b2f67f51439db8d80903c494a8883b2f0a4ccb719125222b3283e8d6be238ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in levels-canopus-webdriver-mocha-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bddb6f11dd61b299f12d5dc5c0f67274a2e4750a1798259d163f335b3fb0d698 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kronos-library-jasmine-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e649f5132815d972e00153417bb9efce79e604707867914d1eb4c868e30046da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enif-react-bootstrap-gravity-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7366c6b2b849d14ce39d70c33c2606bc5ee97e6c0656befc2c46757026a36cf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jwt-atlas-betelgeuse-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b6a66f49bd2c098c51d6b64c9f1b8c603aeebf941927a905ed3e84b7efb3e18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...