MAL-2025-143707 Malicious code in io-unuk-pegasus-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 699ab48a82b56c1ebe35a652355c130a90593f14a8995f8b71730ce1fac9adf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149149 Malicious code in virgo-backend-hermes-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05940c7f294c6b60ca9948a699c21c99f5ece74f5993de0fd374cd1fabcc5464 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146328 Malicious code in polaris-charon-delphinus-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1c0f4101841eef379d3eac01b8a6dff8b51c6b61ac857ac5a3fcb6720622993 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147046 Malicious code in rate-limiter-postcss-vega-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf154516a786f3129c492bc67fa03e6e5b0221b1aa910cac2e21fe03e5128c46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147735 Malicious code in scripts-loop-zephyr-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d858326367fb5a479f89e8a5c5167fcd21703e0e73a9fad660ddd332f1f78c00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149826 Malicious code in yildun-warp-orbit-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b21db3f134339742477b0c7535ed2d243a6e7cdcfbba777f7c34a1836cc58569 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144996 Malicious code in mini-css-extract-plugin-socketio-bellatrix-lint-staged (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c680f11fdec440013da9ef0793ba800927779914a1bc83a8b7749613a0921c71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141283 Malicious code in csrf-fornax-xanthus-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d696b9940240241efd098bdfb57e70794d34ea3aa153ce32674ce12d10a5db01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147059 Malicious code in react-bootstrap-europa-postcss-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 190857e6da478036668ce13c9034e9c2c0db6a2eff008b51a0e927f06f540e92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146102 Malicious code in perseus-ora-spawn-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69f9b2d497f009b9eed372879b921b29be260e3950fa8d2f8639d0075b3e34e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147579 Malicious code in sagitta-altair-winston-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baa4de2abbfbcd9f2e5d73c4a11a68ea0ac4f4b264734968882402c3a4b19f31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146460 Malicious code in prettier-cassini-epimetheus-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4510bd0b51addc70473e7827c7fcf4350a02fe7cd9edaac4f156cf39bbc0852f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145584 Malicious code in nodemon-miranda-rollup-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 820c175b0702fa017ab87ec0bca09c1c7eb09bf223bbc7cd11a4cec271b1ff02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147797 Malicious code in sedna-typeorm-mutation-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d61272cda7f06f3fccb46fd29779e95028acbc6fd37fc9c1f6a0c6a66b9f59e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149309 Malicious code in webdriver-manager-blitz-browserify-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cc0a4eff4c39f48a9eea63ae5964eeb9d4723510f3e9bd81c14c04e40883a88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144861 Malicious code in mensa-protractor-json-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ef0cf775eda6da5ee72ec9ec108786c8ff2381ea7d373895eed288b9c05b03e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140172 Malicious code in buffer-soap-vortex-mini-css-extract-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 385e2601e243ff5a96bff2b732ca8a19c8db68b7250400cae9ff4e8e70bb5f36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143610 Malicious code in ini-vuetify-test-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7be5d587a84d0e961ff412a526515fd88cceea5cffce76773278d75a3fa00347 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142235 Malicious code in eslint-plugin-perseus-css-loader-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f0ddf1aabd198f85639e9d3b3af0ae998cbc891b75eba766e8f9d4bc57097d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149788 Malicious code in yaml-express-cors-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c0e357b8c4c2783395d7b2c5be74a839f64a73b1c75175d298ebe42eccec5d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...