MAL-2025-142475 Malicious code in figures-nuxtjs-aldebaran-mini-css-extract-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d20e672be0e7ae2cb3cce6b529f93f301ce63e17a79f21d9caf75844ae38c829 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145701 Malicious code in nuxtjs-command-magellan-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be4d7ba3755aad930a37ae3b9210f3a74d13fa9b0ac6bb8f56825c3aba222abb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145523 Malicious code in node-config-vuetify-less-loader-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 413d8078725859d1005cfce9ffe26542402304c431c1b404966f75b708ed7d35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143522 Malicious code in ignite-pm2-postcss-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8095a9cb35cc211097688e59741a37304773dc1f5130ed8ae6a8a9f8eddfcb5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hurt-teal-boar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f124b2b9ae4a334e270a929e075ffe74689941d78356cfb0a02d6c2b73f918a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in responsible-harlequin-beaver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b00748c3d2042e9b9898bd60ffeca3a9aac108a888ce82ab243cb07f27cdeed9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138893 Malicious code in net-aqua-antelope (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1292b50a4c914df6a4cf3e6b10b3eb402d664283510b566a5875c88f52ba78f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138773 Malicious code in hissing-moccasin-octopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cdc8cf54d1a0f4d631242c472458584cd3c8a458610f8062f1d9c0d2d221046 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138758 Malicious code in graceful-olive-panda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 881decd5f2d5a8e3639665520cca8495ff5fd66a9d7e634181d480ff32a518b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139101 Malicious code in vishalgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b054b1f9806698cae3c70421a3f51632847d10f2bd35cdecf13096eef910d19b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in profound-amethyst-clam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f34997eb623cf6eef95f9f3d394b5371c20678787484f9a0a028a537888cb1bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in varying-harlequin-pig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0efc01ffd237e30ebc8d6127cd738b563f653d3dafc2d41d0dbb803d7037bc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in opposite-brown-bobolink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d359311dccd9fb3b6036a649cfa736e2911a7cf9775a85cda371f6151087a7fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in evolutionary-beige-owl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d5e48972d96ed25c00f6d2160d9dbda71c1c211617388949b22114b8da3fb2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jittery-emerald-albatross (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f04db678b098a8dfad59ec0f2a60cc57030078dd629dec285d829585ed6eea3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in musical-ivory-condor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b5b7bbab3582f3c1fb0a049f6a9a421973428cfb0a7169e201057bda504bad5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yeasty-tomato-butterfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b00a21a7205d596964651bda256ca7a2fd53a0127505ad4fe4320c3027cb243e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138816 Malicious code in isolated-silver-ape (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1bf3579bf50d1c12a6fa36e149c314108aba643f652b64a8de0ac59cf18e589 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138867 Malicious code in mechanical-amber-panther (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f3b81d04b3eec8d7f7df1055c5e60213c983872f9d7c77f0b56a5b93294253a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138985 Malicious code in romantic-silver-bobcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1510931cdd9bdcbb581abd2d21b6fb8cc8b9de1afdf7db21b5f8e2afaf979ad5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...