MAL-2025-144429 Malicious code in link-update-jwt-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d19bb2a6946efa9f9c2e4315a157ed2a2d20cf0be24ac89f296e1801214eab5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148419 Malicious code in sync-commitlint-materialize-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8d6947e064d99431656bf3cd47e63c4c90b399ee4ca1923bb8f4d5a0c514454 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149669 Malicious code in xenon-version-lyra-nuxtjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39b102d936e27cae1f4a4a0d270ab5454a9315e36ace9caea6d9a6ee29acd289 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148834 Malicious code in triton-xml-ganymede-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12c77b434f8e70b60ed9b41c1eb361d6c28e453ad16bb1bdee7d41360d322ee0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148298 Malicious code in stop-magellan-uninstall-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4332253d3795a105d1a7b3111ec0d8148ac9825f77ce34c45ddce4f385d69aaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144313 Malicious code in less-loader-andromeda-less-loader-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8756e1e5dec54aa1aff257fdcd777d65f86e0a6df55149226949ec83b609f32d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143421 Malicious code in husky-loop-writable-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a03548b01ada9be93ed0fb55d38631a5a7df1b6c6fd760240d194a579d9177a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147211 Malicious code in relay-virgo-native-norma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74bbf0b82d1adc23a5064292078fd7c51cefe3f55c09e41f8da9d5714ed67dcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141984 Malicious code in element-ui-spinner-bootstrap-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 955b49c0bd95c502fd03223c8164d7331c570f17e89327a7346c250f55ee2f63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143458 Malicious code in hydra-standard-dependencies-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 537bdc379a0f7717af8724e67fccaa8f2f0474efabaed2f5e7b3827952eb29da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145818 Malicious code in ophiuchus-halley-graphql-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b1b6ad259a3d25e212a69ee17961f59715e73373856eb7ad9ab83ec13be609b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149856 Malicious code in zenith-neptune-puppeteer-nuxtjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b10a2fd2615539814c75993efda49b5c595a87b90f8e157b39f9e05971922a5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144043 Malicious code in juno-wasat-npm-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector becd63c258d392909d6d35ad638018409437efb2477de536e766c7b9ccd607c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145701 Malicious code in nuxtjs-command-magellan-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be4d7ba3755aad930a37ae3b9210f3a74d13fa9b0ac6bb8f56825c3aba222abb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139549 Malicious code in aquarius-schema-link-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e18593dd2817888bcd25d940235adad8818ee1bc9559a873cac93d9ff7cec227 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141329 Malicious code in css-minimizer-webpack-plugin-meissa-shelljs-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ea601fe32f2986c24cf6764da27b039900a4f81ff22922b1697d5543d1533f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144745 Malicious code in materialize-lint-staged-supervisor-astro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3aeb341afe22c30b905d54d93148eba7939612712da0c69a9e3f2d64b6a65e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145419 Malicious code in nextjs-nestjs-html-webpack-plugin-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc7059d1a15f426a74fcf592bc2bb475317c6e5b874976cc1a75139833e60e15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145523 Malicious code in node-config-vuetify-less-loader-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 413d8078725859d1005cfce9ffe26542402304c431c1b404966f75b708ed7d35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142944 Malicious code in global-norma-toml-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ebd506c20629a6f6c2b40cc07276461e3e5b8f00c69196c8ec653bf731e927c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...