MAL-2025-140745 Malicious code in child-process-fornax-ophiuchus-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e62e14ba578f9389f96c9befb8dff2098b3c6d0e1be62aca0d7dfb57d570ef2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139607 Malicious code in astro-got-spectron-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f999588a4cb52296bc68b50e588cdc7434b2f57827ce86ef72b7bf111b292cac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148445 Malicious code in tailwindcss-janus-docusaurus-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1e1c10d9dbb89f0b0f2583d0b24dcd813e2e7f27a7a12e0692a0fae4c81c2e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140228 Malicious code in bulma-sadr-registry-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49139fe083040a54e336806ef9971053450cdd358b3f344e5848b86fcccf433b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143073 Malicious code in grunt-quito-postcss-loader-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d826d965e9cc8b660a3f05be49a7e3a2285006bc084e6fdd7c51e38c1d14db96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143694 Malicious code in io-elektra-chakra-ui-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06ec836c25be7c8fccdbaefff9c32a7db893a66dbeab6e8597a1524652329167 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149594 Malicious code in xanadu-electron-uninstall-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0597b15a125f89f0a8bfef840956f33b02adcc1c53efbe7055a7739d69bb71f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145123 Malicious code in mongodb-cz-conventional-changelog-mensa-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e1a7faf3baca9e07a6ceaeb3feeaa18038e6016bc1bbac64f91e7ba751f4722 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144168 Malicious code in kinetic-development-mdx-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3be606483ce990fd7946a1ab9f548c56f96b7334025b544589d5e28733ecfd8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142053 Malicious code in enif-meteor-protractor-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d280bc7059630f2c2989f4ae50b3817b2c915851150845a4b67d6caced3bf3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139723 Malicious code in auth-install-express-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc84c9cea7a462d14f089d9789f7cf7e51ace437fac4962b642f9119a22902e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143505 Malicious code in ignite-antares-terser-webpack-plugin-mini-css-extract-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 678314a42cd5410b1e3b55dcfe9468f7b009c2bf1126ee336cfd1b2dbbdc65a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140955 Malicious code in commitlint-chai-wasat-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 191f9c9f5e91d2aa004aaaabbed9769d5b2df47ab656bff9dc8d2e43c23b5338 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141703 Malicious code in dotenv-cassini-andromeda-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38a4f915d36d6fe7213873533f1bd09b13fbabb4098ca696149c2e6996936169 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in equinox-restart-webdriverio-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3c1899b400267388e1f79138f7b9c4756f3940d4bfbed6783ef7da2ee33251d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bunyan-dotenv-parse-variables-bootstrap-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6a361166347995f8a1116d8387938ce82cbbd896b8be9677f14169f4f20b7a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139693 Malicious code in auriga-xenos-command-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fec3c3ef11e14e50a517e63caa9aca355427c437df4d625dc2d40a9c70a4b22a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144852 Malicious code in mensa-frontend-sedna-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53665ead08c8ec17b51688daeced105daa9d1ac3f82de921c27b8b3a6d165b52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148073 Malicious code in solis-forever-framework-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 316e03d2d9b03a42cc0a18edfac946e966f105a3ea8f7dbdab34ec57a72304a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149128 Malicious code in venus-webdriverio-lint-staged-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d022ab1c45b9bad09802f9c4a3fadcc11d38c388780cfc540d7dc131bc3bb3b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...