MAL-2025-144325 Malicious code in less-loader-phoebe-scripts-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0453a8015b61b94e10fc0eae56409daed68846374d696e999e769cf556719508 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142309 Malicious code in event-deimos-mini-css-extract-plugin-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10ae3339de31987245b0464e66994d4f5c09550d0710bd98c8ce08bb3c24c76d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145725 Malicious code in oauth-corvus-atlas-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aea6397626f678ed2718693c793e7e8c9d14c88e40df83e6f5158ac589f021b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142704 Malicious code in frontend-hydra-morgan-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2b963aa21771fb79afb2a1d90627a8185e9f4f8c71fc8ee3b0bdbd1516edec9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139658 Malicious code in atlas-sirius-comet-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97fddec731b84136b26868a5785d71228d094a80260d9bc714df326b31567ead This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149070 Malicious code in ursa-rehype-charon-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52264c975cef4451250a9b6d544e252385448007653f0902b60ebcdf3ca76211 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144245 Malicious code in lacerta-luna-writable-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6400b0aa8e5a72fa1f6e1bf567ff13816518f809ec298c81675edce4e202d804 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144511 Malicious code in loglevel-ini-puppeteer-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d86d35a713bef02da5c1926e23331bb6bc7c3f7fc1af3b86a3504773d862e7d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149178 Malicious code in vortex-antares-axios-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 496fdcd645392ce1ce737d33cd2884aa6941d8a60e4abc6055eabb6cb9fb6e18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147308 Malicious code in request-remark-sadr-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55198b1951195c04b8787ba7ffbd4ae734f7ff221bcd530b6abd49b8e709a72b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142032 Malicious code in enceladus-pm2-metalsmith-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dd6535d0df808138b8c1274dc7cc91e10777d5e12474f13dd805e3e6828a0e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146478 Malicious code in prettier-plugin-markdown-browserify-link-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da1a8c727ac3b13bfebcaf88f918fb328f6db6db6c868976d5d5db78df819ad9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141276 Malicious code in cross-env-yakutsk-octans-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ec258cbc55d95a4aa0c35968e62956f226510e7535d823debd9ec5c976ed91e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141187 Malicious code in cosmiconfig-mocha-mdx-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89e6409a70557c88c22b300d1eef3de7cac56caeb40ddfd9f8c457ffa474cb67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142877 Malicious code in geckodriver-nuxtjs-typeorm-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2930cfb3b48567b4f11af36b177f077dd690840f10b74887c4e301a2e747b364 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145314 Malicious code in nconf-enif-tethys-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 868498dacc5038beed0a5eeeab2d2f82f9b34adb1db915a2f88d548d3d3f740e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143717 Malicious code in iota-cross-env-socketio-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afebe0b6d512b1d735f630ee7d5d374f7dcbef74fdc224df629708d129a90740 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147312 Malicious code in request-server-ariel-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ab9456315197599ddcea0392f87eea221db5072caa463e66a4a04e562bad81a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146201 Malicious code in phoenix-markdown-javascript-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 194fdc7c89040402f84c7f588132dda2fde733d422fa806aa30af0599cd5f431 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144757 Malicious code in materialize-titan-start-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f008e3b88825c9a54a226f489afb5844e6528c5993f15a38561ed9d9583853fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...