MAL-2025-146341 Malicious code in polaris-flare-wezen-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7f1701576b7f75072f88478c01ff68a76e579fe05dbcf5a902e4bf45b63903e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148629 Malicious code in tethys-pino-pretty-algol-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 467af395bce0f84fc6451ae43c6c749e70edd4dbd4beec8a23658c5071d81ec2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144555 Malicious code in loopback-kastra-soap-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e6751700dd5dafa2b7cc3b3121f35df9e182b23f1034caf2ebb6aedeb0f047c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146711 Malicious code in proxima-dotenv-safe-callback-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74f888f6623cfe2d44ae9d4d23bc7a06271164b3c4870137dd080e45dbd0a387 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149892 Malicious code in zephyr-npm-farout-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f1ada7f740daf4ec82a6105cd6b46ced4f8385c45a41d911c90df80cba58d39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139461 Malicious code in antd-meteor-pipe-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17253d0738b27dbf70dd54f4a14d25e78c49e7c9045b8cd3a1eaab054173f5df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148109 Malicious code in spectron-bootstrap-yaml-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3f56029d7ba08a16d0e0186ed582f9e0eee3faf4dd11a94341de93ca17195cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149883 Malicious code in zephyr-child-process-apollo-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74cdf2cdaee2edc3bdaa3dafa44c797d167187a3a3f86acedc1d2c42d0b8ced5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140423 Malicious code in carina-resolvers-jwt-xo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c175874bc0b58a6c800289edc50a2a6c585a7146bf9f39355407804118a5dbd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140153 Malicious code in buffer-canopus-winston-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e109a353f691fe89d06cc5a0592a2b088fb07a79f8484ecadd2d786a6a6f3b97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144647 Malicious code in magellan-meissa-mini-css-extract-plugin-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2459c79d8b788d5176ad830632ba8bc2008ac20d2c3fcc62555442cb227c787 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144736 Malicious code in materialize-celeste-eridanus-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d702a92f89ce951ed0dd9e020041f48c12217dd201c89f2cabf03056e73fae3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in radiant-local-magellan-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b008f7cc192e9f504f1506fd14fee85d7b274ba80d2a60521cffc7753559a0dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147601 Malicious code in sagitta-koa-io-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4851a6afc2d0560423e4f641238690dd6144607978993a528fbaa40438934d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141138 Malicious code in cors-slidev-json-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffab7ee1097a7df9774ba57469dd259df17b9e9111d9a59f5f924b99d6102dbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140995 Malicious code in commitlint-triton-less-loader-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 359f28fccd67ed92da7ca0e7b2618ad8b2231c15a5d76882a1f4682b81ed5219 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142550 Malicious code in fomalhaut-pyxis-child-process-terser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8266f3e3b1d69445352e920f258de0ae4c53efdcb390390a11291ce23337a51d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142455 Malicious code in fetch-pyxis-inquirer-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22460db8edd1c2b50d5e673d6618b9ce1467318283c7d01eff42c298a3541333 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144435 Malicious code in lint-dione-publish-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cff882e7626745936fd70d55ac96b8390b9cd80e97eff19f2a3bb2a37cf345a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139563 Malicious code in arcturus-aquarius-corvus-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7008accfc22c14a8af2b886aac5141f689ae9dfc2cedcdee94a9ce96e0ae2897 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...