MAL-2025-145860 Malicious code in optimize-css-assets-webpack-plugin-config-bunyan-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a271f5b41993cdab8696ed3c8a08371cdbc6ca90fca62b3ebd1fe492a130b7fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yonder-corvus-semantic-ui-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6257c44e54245534f9269eb8c317701f310b8e97f0b8feb397f7d590e1691323 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141710 Malicious code in dotenv-parse-variables-cache-halley-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87edd49dd5c49c31d0cbf8fd0c1cb15be270a7b24c5375c64ca5649c9779c8c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144566 Malicious code in loopback-test-mongodb-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06c06e20ea113a93cf3404abcf96e9951035a0ebe9ec1158d959e1b2ff25a16f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149556 Malicious code in wolf-perseus-release-it-mongodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c93298b7cbf597b2cd7f3eedeef73414dbd7aa907fda69fd74d6492e990167f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145579 Malicious code in nodemon-chalk-standard-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bc33a1334c3ba3564f3045da232e4e02b45ad806f336f9e1fab0efe8a107f6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144459 Malicious code in lint-staged-library-fork-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 599e178fbd7b06563cee8ffa42611bd250dbf206a67592c620ac211ef0d23d4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nestjs-cressida-pegasus-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9b69987b3b711712af2620dc816b97bc32e9d6c0e4bf7a77624e4b559718a31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142223 Malicious code in eslint-markdown-pdf-gulp-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c270190fb82c3f6cb1ae2215fb4e05a1af89fc5963a7cd63c37138ac749fc92c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141009 Malicious code in concurrently-oberon-docusaurus-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8788c9948d1b666bf7589ea421a9f440e0c6e9f86e0cac0940f16fa789762918 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140256 Malicious code in bunyan-sirius-nashira-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a80839ae4b1e9d6b67291153829fc2219acb1002afce7fc3726e1d9503d4a5a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146875 Malicious code in pyxis-docusaurus-quito-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e4fdcb0fa11f7d81e3e00157275ea670dd1aa4dcec97934fc67da2394e5246b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142499 Malicious code in firebase-google-castor-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1c35d855c4037261cc0e67a28f5041d8ad7486426f5f63b1215b4d1954ca699 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140563 Malicious code in ceres-electron-builder-nuxtjs-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e27af84557abb99210e779cdf34c4b8aa18e306ab7d8f146d19b2a1a8fcfff34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147951 Malicious code in sirius-fornax-process-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad18cca3b1bc8f7e73a9387d862aa3db2328ae3d33cad98bab4d1abcc726e699 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139851 Malicious code in babel-delphinus-envconfig-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8046a5c617b1040dbc97962fa241b562a14f16e3039d8bc96bac9c765ea34405 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145573 Malicious code in nodejs-pegasus-rehype-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd0ea20bfda57114b13227d54b4867638669a04fc1721663633af6db03bf082f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140942 Malicious code in commitizen-spectron-webdriver-resolvers-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f395643d9600a61aabe9f53d23f3b667c7024f70af1c64bf477d9fe481b95737 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147555 Malicious code in run-script-vuepress-bootes-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83f92fcb02abdf3ddd958606e6a604959cbd6e8afde1cec02a001c1694099bfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140419 Malicious code in carina-passport-dione-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bfc76c7e554c7c02fa03e7f10bc596b151fa82e14ab6225d84272811a080a26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...