MAL-2025-142855 Malicious code in gatsby-yonder-polaris-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 691b0ef996eb6991d3b134c40d40b4d6f52350fe5f6d04289c9efe2b264e58dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144245 Malicious code in lacerta-luna-writable-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6400b0aa8e5a72fa1f6e1bf567ff13816518f809ec298c81675edce4e202d804 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143504 Malicious code in hyperion-zenith-ganymede-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7682f9c0a6590a2ca4e15735a1a4c7dcc1c42a813ce4231957fd79e906f9317 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149070 Malicious code in ursa-rehype-charon-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52264c975cef4451250a9b6d544e252385448007653f0902b60ebcdf3ca76211 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146077 Malicious code in perseus-colors-schema-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bee6fcebd73680a62ed9f99126853217c03c9c567b7e59687a3212e50d45158 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141816 Malicious code in duplex-octans-proxima-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63b3bf319b92e4a0abaaa40adf046cf088a33ab1547bfe298f363a01dbf049a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144511 Malicious code in loglevel-ini-puppeteer-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d86d35a713bef02da5c1926e23331bb6bc7c3f7fc1af3b86a3504773d862e7d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149319 Malicious code in webdriver-manager-fusion-mongodb-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c18743cfd4ff6c9eedea2a8176bfbb837d77317f5737a3996133ffe258edf72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144181 Malicious code in kinetic-pino-pretty-centauri-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a32af7d0f49e379c176a6e6103f86e25cb05acecb7aad3d0e0bb45637def324e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144594 Malicious code in lynx-iota-cz-conventional-changelog-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c1652856c44e9fe7376fb9868f2b409d579a3e47c2aec587f52af141990bc4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142561 Malicious code in forever-astro-element-ui-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb32b73101078f30afc48ba9b5202a97f6b98b70d003ee7aa0e2098aa588b609 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141551 Malicious code in deneb-neptune-pulsar-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ebb4537fea3ae4ab2a239289e78084f27c4fe58003d56783f02db600f205a66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149236 Malicious code in vulcan-gravity-carina-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2255b2533f27f07d85f1f3b076096769c811f06d89dbc0fbabced78c2c5c67e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141440 Malicious code in dactyl-flare-galaxy-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf46e48e76d6587396a1177789bec4bdc75522c87f71b961f23e88989f9223e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148897 Malicious code in ultra-gridsome-aldebaran-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92f8327283601fb4393b0aa988429a28162ea15a687d0f2607dd64d2ed36d158 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142704 Malicious code in frontend-hydra-morgan-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2b963aa21771fb79afb2a1d90627a8185e9f4f8c71fc8ee3b0bdbd1516edec9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142041 Malicious code in enceladus-vuetify-foundation-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72476d2b806b3687d1fa43ef3713ada1a16d869cb5a1f91e4df2ed45c57b6dbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143179 Malicious code in hapi-commitizen-update-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46b26b06dc60a7b6a8944c637b6cdbf741968df7c18314dee31911816cc31f46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145725 Malicious code in oauth-corvus-atlas-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aea6397626f678ed2718693c793e7e8c9d14c88e40df83e6f5158ac589f021b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146250 Malicious code in pino-regulus-centaurus-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af60b4baeebc6f1eb35835dfcc99efcff2726fe3992c0c7b2dd0d6519cc5551f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...