MAL-2025-149640 Malicious code in xanthus-zephyr-deimos-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16ccfe0c43aafca1e1a13e11767e2e20951dec1dda7606e25cc0f63890bde69f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146449 Malicious code in postgres-spinner-titan-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be7660d9bcacc163d4a42e3a4b61caa5d9ebddbbeb182938dffe65d55df730a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139708 Malicious code in aurora-publish-markdown-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a6c37dc5bc5d8fcb554dbf6f064affdc92e9b34a5aeca6ceebbeee20d52be0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143989 Malicious code in jsonp-blitz-cordelia-less-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e9a2d48029e6469105d9d04046b04f81c2e0c08dcaad383e50ec9eb573552b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140162 Malicious code in buffer-mutation-changelog-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24e6b39bd12e70f7e32d3f9df10e9c2f4c51ba4b5212e46797a8d7d6c521b505 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140798 Malicious code in cli-geckodriver-aether-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18846f63f307e6c3bd0ab988ed29bd9c00e3411f32d9b783a0b8feafd51e01bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148590 Malicious code in testcafe-csrf-lacerta-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef0c9fe738e4d61c04e2ec74182208a69330dcac9da00526c270c09930a40f8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149121 Malicious code in venus-reveal-md-chariklo-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcade5cf30b3a0402a16ed5fe6a8901df4d3127ad009edaec8965926104d55dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145244 Malicious code in mysql-elara-kinetic-pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92c00251c250b3e76556a1a9832ca26172cfce2fd6b2a02f3b8d0b9c8b6994a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143916 Malicious code in jekyll-transport-fusion-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90acc8ffa85bac80ebe5f7d7f7ff730194b5d208154fe0f059cf44abad400c98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146773 Malicious code in publish-alphard-css-minimizer-webpack-plugin-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df07588139af13f8b920c87e78bacd917d9829ec1b3565249015c0dfdec6d5b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146904 Malicious code in quantum-install-puppeteer-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b724acaff6d5a6ae464eb4bc6952dd230597cc047db7f7a926acc4906c1510a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140547 Malicious code in centaurus-mongoose-antares-ora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e24a06760a140827738726718696e4b03089d7bb0d21fc4e206ac055c8040c9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143291 Malicious code in hercules-private-mocha-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54e752500613866d1f86af372b0dbb9fdc991befb9a72097f6aebc7e2846ef29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142444 Malicious code in fetch-halley-await-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c49bc547d565dff9a16ca114112f58261d335b57e56672f1fd9262c73fb5a5a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143208 Malicious code in heka-mini-css-extract-plugin-xenos-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b17a7f1db0e8cf65d171b6b053a9b54a88580fcb443ea927debda2adbfaa55a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144087 Malicious code in jwt-telesto-bootstrap-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e8e9921872e0584a4359c709971f101c91881e4b879963244f8b683d3c58d81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145828 Malicious code in ophiuchus-mongoose-warp-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40fecd700567c4dcd4a37b5555359b2c372b61412335ed0d6f7bb32150d51446 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140613 Malicious code in chakra-ui-eslint-toml-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02f249440ac1dc8f9e957617a2c8623846ef58e8783e0d3df5e62de25c9b5906 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143770 Malicious code in jabbah-blitz-oauth-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d945e0902b08e77257713b7316b3c50f0ce3c87d1e8804b22212a53021f2df88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...