MAL-2025-146262 Malicious code in pipe-dynamo-nodejs-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa9dac7feb2c94e2e98f30abb6178870ede5b7ff4102a2d06705e6c6e7f5490b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148089 Malicious code in solis-spinner-canopus-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70de15daf42e5880fe1aef7c23ceaf254db562fb9cb058e44b29f7c137f04ec1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144330 Malicious code in less-loader-sirius-perseus-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f8179d4fd0c1a7546ad53b8f5e279073c0c9796bf3b0ca8aafd3ec5fbb3ddf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145632 Malicious code in non-blocking-xml-procyon-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63d0a264027b7585c64463a147d401953cef73809abb5f32ecf3d768ab2c538e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142224 Malicious code in eslint-pipe-rigel-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 945b68e2b23a41cfec0080ab381b2aefd14282d4ee2b94a35c51bdc20dc5ea90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148390 Malicious code in supervisor-centauri-aether-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84a19158ab0964c26c031c48bf99bc4fe2f208abf9dfe80b638f260dd235aacc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143169 Malicious code in halley-superagent-hydra-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4642c3f8ab7d248da3daac08d7f2f06935af9afa6a749306e9b8fa8707d54c38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149808 Malicious code in yildun-changelog-slides-terser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94c1e032d0ea97654da29e16043fd146101a608beb21f7b3ac344026965acdfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144699 Malicious code in markdown-pdf-ophiuchus-lint-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a451c521b719214daab4309206ebefc8786247beebe36e90572871635519afb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147407 Malicious code in reveal-md-flare-kastra-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a4d5029e79d92fb9320a01d69d6c1d518d94c63e5fcbd57796022a9dbedee43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146442 Malicious code in postgres-pavo-tool-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd2addda10f23ed7cb19188abda0a250d743d2adbdd413ab1c73bcc665ff6803 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142515 Malicious code in firebase-server-miranda-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector beb4a7fb178cd7eadc112d909aa87f187fb04dd8148d9afd9a0ff5227a5d61e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141146 Malicious code in corvus-callisto-hercules-kaus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d99f24f56cb7e133b01201ecd9215855d54fc7a3fa3079ad2d1d61ff216ac59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146165 Malicious code in phoebe-nightmare-npm-less-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 774a47fdb518927067c69933219ba0bfd8dbf5fb177ea54f167901861846ee65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149339 Malicious code in webdriver-manager-yakutsk-meteor-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 875fff606ab52451855235f1681354d08bcefb6c29a25fd69abbfd5a0fdd9a05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144232 Malicious code in lacerta-apex-weywot-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5af945fd83b51e0b4e1ef98ceeb87b03d2659cd4bdf13b320dc9ad61431285f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141330 Malicious code in css-minimizer-webpack-plugin-nextjs-ignite-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32d9bd9c8e57a6c6ff9133b038b3361debed513ba20197e82b6ce545a7005e06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144220 Malicious code in kronos-grus-iota-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db435aa072da87e3cd2d851ea479363d8f2614b417ea1a476c6693b7e935fa80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143916 Malicious code in jekyll-transport-fusion-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90acc8ffa85bac80ebe5f7d7f7ff730194b5d208154fe0f059cf44abad400c98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147647 Malicious code in sails-farout-nightwatch-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a3ce96e3b741714e24b907bf10a467fdea25a56b6283e5557181041c9c11b63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...