MAL-2025-147604 Malicious code in sagitta-luna-uninstall-sadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f782191c278c6bc57c441f785dd87f2e95bd22c25c583321e8ff771f44a1e2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145665 Malicious code in nova-protractor-nightmare-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 395b9e415757c6071f6593050f97c59f34e49f7c658690288d860be19b3ca16c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139556 Malicious code in aquarius-venus-nodejs-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dc2e66c5e746f8022215dc50cec9024ea7c7a0932e369c235ebe321beb13fe8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139589 Malicious code in ariel-indus-telesto-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e010405cee714fc544f42d8632a9cd0c8322ff38222e8bb03224e51fc0cd1eb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141475 Malicious code in dagda-less-loader-public-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab89e3eb545254371daacf9a56dc9363bf5b97df517aec1450925538803cfb6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144499 Malicious code in local-sequelize-spectron-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5a39a04c280b71bc9a697c00c880362eeadfc5608b3869515b2c571eb798f5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140097 Malicious code in bootstrap-auriga-sequelize-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a36dbb251825bacf1163d64cabe662dd85f1e372883e82e36a063c852a0a2de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139710 Malicious code in aurora-run-script-ophiuchus-rehype (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 241691cf5bdd46c9383783776eb754470cc879fa8b4b29a106fb767123215e6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149349 Malicious code in webdriver-mocha-grus-zenobia-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d15f7a9cdf7fc488f0521552c98a014b1654221c8d0232d763a1a6eb14445b38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141873 Malicious code in elara-enif-local-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef543fffb12161f3ec3777479f5e7d7b6efea83867841b88fa08b5aa7f5cb74a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147605 Malicious code in sagitta-lyra-leda-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb780c8c954985b5ef0b82b4a8234f723923b792e3b06ab8a105705d67ef2d13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139409 Malicious code in antares-forever-eleventy-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1176b13fe05a33c670c5065abbc172457e68eabe3127f0c4345eb74dfe4db208 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149063 Malicious code in ursa-meteor-hydra-oberon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a33770dfbac66ffcb26f1980fbf651debce846bbe4d0a6c950d36e990f3ca549 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145016 Malicious code in mira-polaris-forever-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9839ca6c0ed2a3abb6097d7ab67e407b1aa3ab53b40751672e7c85aeabc8394a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143520 Malicious code in ignite-nodemon-antares-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37ce98fada83e7832d662cdeb2b40bb93a78fc8d8a1ca5dbcaa1dd92aff3b2a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142748 Malicious code in fusion-umbra-farout-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2276a1acac285c4c61c33b38733d0141742a73f31ba16f4d787ec835a352f2d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141424 Malicious code in cz-conventional-changelog-markdown-metalsmith-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9482e36bbe4901e1af6bb14db59f11eac88fd2d639fb758299a6a41f7db6f35d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146588 Malicious code in procyon-electron-private-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1abd1fbf5cd8388dffa1c895ff29edb594569791ac53d32d1bd721ba68fab52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145108 Malicious code in module-lint-rehype-optimize-css-assets-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2939b8efc57b0447f1e6a1c6ac30eb1b3c5f6a835d155211f5ef7e8a4b2a4009 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143913 Malicious code in jekyll-quark-sync-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa7835916f3c4f8b37024734e440a3eb602cfc77184e289072d3fc20399511ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...