MAL-2025-141285 Malicious code in csrf-html-webpack-plugin-postgres-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0af2b65af5d61317084f768e05e83372d68c492ba3973262f0486b6fd8717364 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143242 Malicious code in helios-vuetify-deneb-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9018411a1ed02158055570dc48502874efbe84da714416b032412d42a6186f43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140898 Malicious code in command-child-process-perseus-xenos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e3677b217765d5423fe859eadb36db03aa7596c2d9df7972ea04455361e5815 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139638 Malicious code in async-vega-jupiter-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c64c3ff0fcaa999f368800299f9e3b6834bddc93d44ffefadbd20b354fdb971a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147688 Malicious code in schema-arcturus-relay-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf17e4c24c9b9e673c663e399ede376f3d5a92e1c679fb3908cadf2fa7bdf2cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145999 Malicious code in pavo-hugo-winston-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bfdf061a2794f8911e73a0f36fd0d80603c5fed1800c355ddc0f4ef97e5a82c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147565 Malicious code in sadr-jupiter-jovian-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bc7e063658215b0c112e54f4d6bbd95b31dde9133123195364ac48534b2985b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144917 Malicious code in meteor-janus-await-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dc9b9ed01714f5ed46a16d16f8f9fecdea619e151dd7ff7dfb534084044ba4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147968 Malicious code in sirius-prettier-stylelint-dotenv-parse-variables-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 611e5e66a2dadc8e4f679552552d528775057968cb7051d625d46e870b5fd204 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146500 Malicious code in prettier-polaris-avior-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3192b3b22373e63e2493a019959c33075e6492d8e743c885cf39b43bda1abca1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142435 Malicious code in fetch-bootes-concurrently-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a73770f8dd611198563c5d0eae11af04fd9b01fbc2d8ab53e3b77989f6c6ac36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141817 Malicious code in duplex-perseus-local-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c89edfd1d9823ff5760892e24d7c7e222e5826fe1bd7fed01a812dbdef635600 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142804 Malicious code in ganymede-impulse-dotenv-parse-variables-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 465e2d206b79153b87e7ee11c402e73cac24432e0d5be4983711cc105753fbb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144523 Malicious code in loglevel-xenos-child-process-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89afd7046dc02e65e205937635f26c7474c3f5c9ba7e19863cb1fcd4455e0cd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140340 Malicious code in callisto-levels-subscription-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3da1da336dd77cd89cb44218e89717c86254a1d963cb305acf62f650a1d7b203 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in leda-commitizen-markdown-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b8e979a090f60a54fca3f0d3105d850cc6f5ab00b9a750dee625b3aad03d57f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146186 Malicious code in phoebe-vuepress-magellan-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55d4444cd67ec059751375883091c0d13009cfa6abb9484c13bd82a6e3c269af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143797 Malicious code in janus-apex-writable-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abfdc92c35108b7bac99e9f035fd519cc20125241b0a253c8541000e44936d16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142349 Malicious code in exec-less-commitizen-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c99abd01217e56aebbfb133b6b43794511bc65b3e048a0bb58821ba2d7898bb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145941 Malicious code in package-perseus-weywot-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33c0da3948896e0aeaffec2860a96f542c0f37b09b504217c4ebc4ab8620d806 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...