MAL-2025-145725 Malicious code in oauth-corvus-atlas-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aea6397626f678ed2718693c793e7e8c9d14c88e40df83e6f5158ac589f021b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143504 Malicious code in hyperion-zenith-ganymede-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7682f9c0a6590a2ca4e15735a1a4c7dcc1c42a813ce4231957fd79e906f9317 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146422 Malicious code in postcss-slides-browserify-less-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ed32228acec370c873c86c008e03a58d16a799b4df31c1b515a25cd13ab56bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141989 Malicious code in eleventy-aether-package-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b35202d4e67fc27cc38dae4b8a48e505bae3cefd543cacc2a79d667c7cf47751 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149503 Malicious code in winston-jwt-sails-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deb006c2b2793dbbcbe5f7a7f5b52c5850abecd1b69042e481b38dc15078b81b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140157 Malicious code in buffer-gatsby-less-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a17d501af7a70b3a645083209e4b5ddb87b03d3ea34e7427b64b6b2c2dc89b65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149319 Malicious code in webdriver-manager-fusion-mongodb-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c18743cfd4ff6c9eedea2a8176bfbb837d77317f5737a3996133ffe258edf72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139182 Malicious code in acamar-perseus-leda-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02c01d851b7518dc08365875d2faf898162379eab5f57f890791a44de7fab39b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144837 Malicious code in meissa-supervisor-markdown-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a60cdc4d5317b650a261573ff13fe8a451e6e91f68730697fa7045ac908f307e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146077 Malicious code in perseus-colors-schema-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bee6fcebd73680a62ed9f99126853217c03c9c567b7e59687a3212e50d45158 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146854 Malicious code in puppeteer-init-eclipse-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e2418e40c239a3fba75ffa4648edf93cf9cd268bb4849448363e5022edb4c61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140163 Malicious code in buffer-nodejs-native-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bdfe7b627e6dbe13e573500c4bac8abb0660f48ef88bf69c58ce61ebef05e0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148897 Malicious code in ultra-gridsome-aldebaran-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92f8327283601fb4393b0aa988429a28162ea15a687d0f2607dd64d2ed36d158 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147556 Malicious code in run-script-yakutsk-halley-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7a58c1f464fea877a39af969ad6aba5cf99dafdd0dce3a22da490775de5e301 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146478 Malicious code in prettier-plugin-markdown-browserify-link-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da1a8c727ac3b13bfebcaf88f918fb328f6db6db6c868976d5d5db78df819ad9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149236 Malicious code in vulcan-gravity-carina-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2255b2533f27f07d85f1f3b076096769c811f06d89dbc0fbabced78c2c5c67e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142877 Malicious code in geckodriver-nuxtjs-typeorm-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2930cfb3b48567b4f11af36b177f077dd690840f10b74887c4e301a2e747b364 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141200 Malicious code in cosmos-blitz-got-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3cab308e3dfecb0e0f1d7e5a6ac6a093767de259085409cb5e48b1f410f5560 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144181 Malicious code in kinetic-pino-pretty-centauri-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a32af7d0f49e379c176a6e6103f86e25cb05acecb7aad3d0e0bb45637def324e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141633 Malicious code in development-slidev-dotenv-parse-variables-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e91385d709f1ebeb5eb823a58d2c7ac5ea313806b2484573755491b88a2892c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...