MAL-2025-149826 Malicious code in yildun-warp-orbit-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b21db3f134339742477b0c7535ed2d243a6e7cdcfbba777f7c34a1836cc58569 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143610 Malicious code in ini-vuetify-test-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7be5d587a84d0e961ff412a526515fd88cceea5cffce76773278d75a3fa00347 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149149 Malicious code in virgo-backend-hermes-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05940c7f294c6b60ca9948a699c21c99f5ece74f5993de0fd374cd1fabcc5464 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144576 Malicious code in luna-pegasus-nconf-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0fa455b2059614d207d686005cf0890c87f2061d148044477b6e8eafff85443 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142002 Malicious code in eleventy-lacerta-private-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ee64091f763f6cd601e7470176a085b208a5ed98f1bf424ab4613c439eb7d79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148387 Malicious code in superagent-vuetify-antares-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10a3e180e9f01360ae15a1ed1c0c54fcd8e78edcbc812170d9b376d7923c62c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140614 Malicious code in chakra-ui-gatsby-terser-webpack-plugin-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7155735cc7a74b1699670cdfed221d3534cc08d4b44a375b725841b1ddf47ca4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145726 Malicious code in oauth-dorado-gacrux-ora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 717df737b264bcfe501c344b361782b8805db7032ba93e9e1a2a7bab4dafada3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144687 Malicious code in markdown-pdf-callisto-lint-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb134446e468c46e4ca3d83d7094d21bafd81c5f717f091744634024b17d9c94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148435 Malicious code in sync-transport-resolvers-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16ae256d0bc9ee4ca201d3790838fa96e379e70cc3ede5fe9e7ed844a7513d67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139446 Malicious code in antares-vega-electron-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 040d240576965aed13ed11371c55ee7e2365e2d115a89b45043d3337d7d15156 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145524 Malicious code in node-config-warp-resolvers-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf522e96176b7020c00c11bb3927f3ecf1a99cc38ef425afef2524f03f8315ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145263 Malicious code in mysql-sqlite-eslint-plugin-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec435a93019b858cbb763aad9940adcfe0490b0100a4c6be9a8be1ec65a3c24d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140488 Malicious code in castor-markdownlint-semantic-ui-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d55243df6cf5da78f44239d0393b545ff1f217d0bae570f37a760ea7516868f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139524 Malicious code in apollo-quasar-hermes-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 652e2d076c3ee69316f7b51ec59ecd9c44accaccb4af2c046cfab5c66c5133e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147561 Malicious code in sadr-hermes-fornax-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e987d54b096a7726f59505fb5fdf043aa1936601415eb013eb1bc52ad13ba607 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140061 Malicious code in blitz-stream-less-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66ecd86eaf3c1e82a40581f4cf468c1491ce380d9ddaee36e03324e2fcf1bfed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140356 Malicious code in canopus-centauri-yildun-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8418bdee91971777e1e5b5c7ce9f2b82d18f2f306cc1bdddb891c9f9ff80c82b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140860 Malicious code in colors-procyon-materialize-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbf32de71538c5a3fc936507de3a7014c69435ee1c7ace63acb5b28f209849a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145192 Malicious code in morgan-xo-colors-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04aa1bb6bb4a6714a7e0c2987b4e6a5f6a8c9676b6d0218f927793c8aa80f362 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...