MAL-2025-147299 Malicious code in request-loglevel-luna-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c031d871b37a23d8446c98106ea76b2a0736e3734a7216e261fcd0f02781d40a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139608 Malicious code in astro-izar-enceladus-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60f5b63fbc2117df1a11a114e5aadfed4eb770749bddd0c8d2a0b2c83a7d4874 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145529 Malicious code in node-sass-callisto-html-webpack-plugin-vulcan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 632da6973cf002bbdbdf9c84729d4558c7c645b572173e0b95bc2bcd2d28238c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146497 Malicious code in prettier-plugin-markdown-uninstall-jupiter-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 016a965ba834659af21a9a6e5d253b93b8c12b8879febe52cc900dcf8c2a290a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147003 Malicious code in quito-sequelize-process-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a364f0c2f21a239ce270b172475644f8ad2280cdbb911451b5f5295a5b4c6d87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143880 Malicious code in javascript-indus-europa-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 583afe01adedb5e8e87310d4449abc3501120532c4f3a755b7a3019810befc1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140306 Malicious code in callback-private-tool-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20450f86f9c85a49f4510f71ea7660274fd84c09b2dce51b607b32f0a59093dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140360 Malicious code in canopus-ini-carpo-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cb5be968ca0d94f6e02b8d6c96a37621dce07de08d5bde7184663b619ec78cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139884 Malicious code in backend-css-minimizer-webpack-plugin-mocha-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59e146e7e103cbcdd39e76b3fd5cf858a075d921f796820be6880d0bfea79a4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147603 Malicious code in sagitta-lint-staged-toml-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fca59636e0d9c48154390c3820e7c28ac94635107dd709d00f284b720b8ab5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140602 Malicious code in chai-procyon-postcss-loader-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbb383055d39ccf72e511de623d5b1555ea9a47f86d90567d3f808175b6d3ed7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148186 Malicious code in spinner-build-castor-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 421b20dd487b367106ab1d674e21d45f7c7271a8b88f3ca452f9b4850cb33f62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148982 Malicious code in unuk-nightwatch-levels-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88b35f4e13724988b9b8b6e19d6cbd6aa7acf2a8df370570ee8ea0c28c6f065c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140815 Malicious code in cli-version-standard-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 590520d16eddbdf943ab99cbcabc3f81869493185964f9727b048f57817baf8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143681 Malicious code in install-release-it-celeste-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01d313480dbdd2fa4b3e74b79097939cc709006077b268b6f7739ebbbb5a559f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146382 Malicious code in postcss-chalk-cassini-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cd5f2d5d3d3bf33c23a3ca41571ccc6d77668f774fa2b3c8985024b5ed6051f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149785 Malicious code in yaml-buffer-nova-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c948bc13570472f064550432d3e307a3798f903e96b0772f1a8dd020008063a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139775 Malicious code in avior-materialize-arcturus-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16a0abe30ecfd362bbf43ba3c31f8f5360240afaf776b1fd268c9fe69ee0e198 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147506 Malicious code in rollup-package-duplex-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 821c407ff719dc4afe450356edd924866833272548005ebb50e5b1f4254670c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145692 Malicious code in npm-taurus-canopus-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d949045a10ffe384f75bc810051fefaa0c8329ba416cf7347aba64b4906bc88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...