MAL-2025-139992 Malicious code in betelgeuse-nconf-mongoose-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6c7e9ccfbb66030779cfdb08d5974f09dae0bd9b40fce68f9703983ce096da8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142025 Malicious code in enceladus-cz-conventional-changelog-slides-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89c0b08346bf9c56d0ce926bc8bcbe0c8fba7e8a52964cc09a4318f02e8cf27c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142471 Malicious code in figures-ignite-typeorm-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba65ca8d3db100e2561aed3aa94db75191efee78aa8dc130f06a757666bd98d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149836 Malicious code in yonder-docusaurus-cz-conventional-changelog-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b7d9ddd9b0082be83bb6499eee01a3e4626c773b70f7731ac99af42a83c4fc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141371 Malicious code in cygnus-jupiter-markdown-pdf-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7edb7d85694a3c456255640009a7fe882ffd52efbc00bf4ee4c78c1d16712c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145945 Malicious code in package-scorpius-kastra-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13206989ca281bd8486109bca034dcd43687f4928eaf2c88002dbd6dcc613c4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142758 Malicious code in gacrux-css-loader-puppeteer-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 126ffaafe4f44d319ebfb460879e4201884b8b653ca7ccaa102f814685839875 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147374 Malicious code in restart-changelog-heka-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a4e9d744ae94327c698804fe82966dbc2351c5296bc154d46f1937541b8f1cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148908 Malicious code in ultra-shelljs-aether-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbc7346b040e81bb689df3bed542cce8811d5d73d35a48936f4312edb9d0c62d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139367 Malicious code in altair-soap-lacerta-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8800c382bc665757e646f163f105123c1e11b66071a5ba311e2158fb8762a7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146992 Malicious code in quito-firebase-supervisor-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5a09f7f0d9ead6a273ab5178cea56b022f83751858faba9668dbe82686d7978 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146656 Malicious code in promise-xenos-semantic-release-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5f58e029f14585cfdc2fd0f9b661cde86502c305c7822ec44d6a8b06181e028 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143660 Malicious code in inquirer-sails-bulma-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5de5c6028b26ad9a9940e7d720b72f2c73610b323b7f8177b16517880b5f1849 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140877 Malicious code in comet-jabbah-airbnb-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f66b30b9c620662089edc15175afac4ff8902761de404a5e35d24b444ec0ada8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146539 Malicious code in private-protractor-geckodriver-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af28cacd8497956d18903394814923afc24c9c0f191933629f82b63a2f48fc10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145045 Malicious code in miranda-octans-gulp-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7c04744516354a46168a3b4f2b000db78743727db300bb9c7527fd54bac5d8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148782 Malicious code in transport-cressida-sadr-sadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 632d8390f7a137232ada996173925b29157eaa43b6603af2eb336c152c78c735 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143166 Malicious code in halley-semantic-ui-proxima-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e6f4cd0746ba42cd6e48559c37cd5c225b99bf94116ae4eca429538f9bd221d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149509 Malicious code in winston-miranda-sedna-playwright (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44939c3807ee987cb2a40ef4c3aac9be69b3c63fb3991f9b00ffc5d1326abdc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141668 Malicious code in docusaurus-ignite-chalk-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0ac628852778f49428df04f0f333889e78112037446428392da60d03dec11e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...