MAL-2025-141203 Malicious code in cosmos-commitizen-quito-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d396766edb0e28e3c059fe2e8744a122fa7919dcec485819019662e51aa0af36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145605 Malicious code in non-blocking-colors-xml-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a7c05a91dd751ebc574c9fafe6c079484def23e71f2a4ea9eb425dd310c652c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147104 Malicious code in redis-install-xml-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d829a1e2ff41521392076b69e3c830de2f7537640987017337f47472c4500b85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149770 Malicious code in yakutsk-html-webpack-plugin-koa-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0318917796ae63cd084347e53a572874ffb930573ff36461e8af28c5b169c5f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145635 Malicious code in norma-charon-cypress-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6c6847fd56e5f61e5388f977b14d33e5665d8d11a56e30d5bf5db8f882ad91d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140240 Malicious code in bunyan-canopus-kinetic-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d539cc7eb5c8f4faa4c7935908582514a5cabc02edcf4ca728eabe1cba80e500 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142601 Malicious code in fork-update-stop-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5331a6d75858fe3170dba64a50135d689c71f8234b42cf0dc3368ba3ddfe1234 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146777 Malicious code in publish-carina-centauri-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1c07122800749f613dd46f580699227bc1e00d0069027dc2215f340c2bb00f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146815 Malicious code in publish-spectron-europa-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 109c0af3a14167896afac3e991da3b3f5fc640bdb673e433085122320a2f2b50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145934 Malicious code in package-karma-europa-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23bdf6b5e512069ce2e5a363f939de73973bd72232bb5ed3e204cf11d25dd264 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139376 Malicious code in andromeda-dagda-mui-xenon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57e6d7338006e8c1b1737fa69cdb4322505b94d628c9feb9845f90dcbeadef22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143711 Malicious code in iota-babel-epimetheus-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6934d4217eb2be569cadb70df9300a05b48f26a6c6f393c7cf46727c37171acf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148423 Malicious code in sync-envconfig-apollo-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c0522e5416d0c39f55f4726793f21f5ee783f6cd714aa945b7a8b701df0ae65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144775 Malicious code in mdx-react-bootstrap-react-bootstrap-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6ac8de44fa35aba6659662beabc7f831c0439a35428e5690362dff458355543 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140745 Malicious code in child-process-fornax-ophiuchus-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e62e14ba578f9389f96c9befb8dff2098b3c6d0e1be62aca0d7dfb57d570ef2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146975 Malicious code in query-nightmare-cz-conventional-changelog-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67cc8ecc2df26572d2d756d4488d3a7ef0335615944d3c536fd7e736160acee3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149705 Malicious code in xerxes-foundation-postcss-loader-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e106167988c40bc173f487701891303d610d3df571fc17138b7208a32f46b453 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144439 Malicious code in lint-hapi-stop-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06034557f70b334c9c54b7ae8eeaea3fecdc5515f5f60638224fd9b47f87a83e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144552 Malicious code in loopback-global-levels-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c51156dce9de4ef059e365316106ed44ef797131009a2bda0f1286fa23f7a3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146202 Malicious code in phoenix-native-css-minimizer-webpack-plugin-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bc91661a591ce06363d9a044e03d074a45545f80c73bb0fa7a69204a4a2561b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...