MAL-2025-143357 Malicious code in html-webpack-plugin-cache-spawn-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15fbaa78ca0f18a5e9ed1f2a13da754a46cc25dcf6e512c8966c3e4f105e78f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139955 Malicious code in bellatrix-resolvers-inquirer-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 858faf8874f21966c54d66bc8f4a8694de8c3a9272f66dd24323ebaccffce5d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139613 Malicious code in astro-phenomic-yakutsk-charon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 461199e72607e728901321d9c389e62b9c84c9d09c748e5bc6c8b32c0f881eac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139322 Malicious code in alphard-enif-xenos-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8df0ff5306cd2b232804f84ae88eca9950582d4e2b06f10bc1b0f12c2a6c104b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139593 Malicious code in ariel-ora-farout-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2499e2c6d1cc3c2e72747a240235163a36b37210b6a5635bc43e1476a8dc32ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148281 Malicious code in start-sirius-commitlint-config-angular-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d94b1695d5b304a35a7ac1f92bbf975775c82eb0b155fe45deb329e1b903b04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141538 Malicious code in deneb-centauri-pulsar-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69a6526bda239de64c4d9457ab972fd6ad08c667ce2fed1a79a3cf3f4a444fd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139270 Malicious code in aldebaran-celeste-fusion-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d449687758ea4d1616ccba7f7691ab128718236e5a1964552aa9a1764a7dca3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146842 Malicious code in pulsar-radiant-cypress-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3178bfda625ae6afb0496687a9c92e24aae195151c40703d0a50c6408ee55d3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148383 Malicious code in superagent-hydra-kinetic-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cce4f69d9c118e5ad1ff99bbacb2aeb11282b45588b80f3a754902c185929218 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145172 Malicious code in morgan-dione-dactyl-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95000699eca91b0ededd51164715e83893012ebc80da1d3d2bd604416d49e9df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139792 Malicious code in avior-zenobia-colors-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a618651c28211d58560b99c0f80a6c373c196235f384a81f13f6c7994f5ba7bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147072 Malicious code in react-bootstrap-publish-concurrently-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40ca53b27778645d89b96eb595882242733d814a4cfe82678efc4b8e67b9ab61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146876 Malicious code in pyxis-eclipse-mysql-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83e1ee2fc463e47934604c30abeaa1ca76f73607788e0c7cbf0682047489e488 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140698 Malicious code in chariklo-ignite-less-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c288fec2d5387765684208aa7cf6ecab742922ab14ae5fed28c8176b4093ae0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145404 Malicious code in nestjs-sass-loader-pegasus-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6047bada6c6e40096c170843b308e373244e22ee727ddcb994dddfb4c306c896 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143006 Malicious code in graphql-orbit-csrf-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 947709eb4c67dddd2c3beb0b9c8b47c7a310dfddfda1f9499574825d9538b59a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141511 Malicious code in delphinus-ariel-apex-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b947a9067e09e6ea0296b684556baf143d2ae93eb8a8041dc79efe79f7e54ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147428 Malicious code in rigel-aldebaran-lyra-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d1e0c655120a046d2727b729878b1ac931f7f223d9cb61daeb683056fddba23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149799 Malicious code in yaml-ophiuchus-hyperion-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 391e658c8a08a9667776016b9b6caa23975d58346ee82c0e81f3025358eb9a02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...