MAL-2025-142764 Malicious code in gacrux-eslint-plugin-link-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8275253c0c44cbd7897a87cee97aa026524c4d7ca5c3b7dc23fad43685c1dac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146492 Malicious code in prettier-plugin-markdown-proxima-webdriver-manager-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9dc5b75c820f660af7ac765ce748737d7029924367551e7bfb04127b2b8f42d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141394 Malicious code in cypress-chakra-ui-umbriel-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6da7a0c50622f6f39f61b3b41a7ec2cba924eafff2db61daeb1da12326ecea8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141662 Malicious code in docusaurus-envconfig-equinox-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d82cf644f75bfb47cbabc64615e3caa508d9bc4d7f83845a2ff472647ab4fae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141067 Malicious code in configstore-wasat-wezen-ora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66701c6c203fbd7db0e370552a5f119cbbb92f5de3ad0aaa4d68f7aa2d274940 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143658 Malicious code in inquirer-rehype-wezen-relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e55d769614ab0ee9cf3e63d233ac385df04e37a618437fc4209773d35934c5cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139221 Malicious code in adonis-xenos-got-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e262eb227d33e53762a9bdaf1b929da6e755daf1cc149ce09ba24785fb8e7934 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142955 Malicious code in global-zenith-cz-conventional-changelog-reveal-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d454667d1ae0a2ebaa313b1acd30a240be2d84ff229ca8b7064608303dd4530 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140400 Malicious code in capella-wolf-testcafe-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 295c79a4035522fd16a4d1ae5bc9c674fe03ec774676b7dce77dfea5c68238c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145110 Malicious code in module-module-puppeteer-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b903f0dbe26ac625de626c67bb566688e158ff9bacc80e7f4f8ee0bb7d5b7012 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146687 Malicious code in protractor-hyperion-soap-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc172a6e98714542897ff86e8b096def8bd773c0f7a8b2d9a6dde31dba23d298 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142843 Malicious code in gatsby-fork-soap-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b73e7a65de6af65020a1c45f76329317657d4f7569beaffbfa56f0471cd8adbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148878 Malicious code in uglify-js-quantum-vuepress-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb55c4cc946096ccfe269a2ce5ee5673ff8a6edc583a3f3b981f1dd96bfe7683 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146481 Malicious code in prettier-plugin-markdown-eslint-config-middleware-optimize-css-assets-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 426eee1ab89dd01a3adcd9ec2406476a79aeb502c22ae7e6c8fd4fe9d4124d2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140131 Malicious code in browserify-less-loader-tethys-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5353ae539bf39da575d3d5f12a1689bd99e53527f2a5508ac7be31a46f625a96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149715 Malicious code in xerxes-public-eslint-plugin-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd2d15fdd3e3f0c5477368f312b0532431a264e618e809ebbdf7474e454016b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146197 Malicious code in phoenix-json-markdown-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7880f03c4f17c08b093bf7dfcb7a59a5ad90b3d3c77a715a8a9bc408fd2ca56f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145682 Malicious code in npm-lynx-neptune-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2e9a2f3ccf8561ae5ef11cea90c1d6d69d8c9f8f26902b42b97ec2fd14f7689 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146019 Malicious code in pegasus-callback-build-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa451bc61732e3800480939f0e2c59aacea12ed0549347ad33424411dbe39b55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142580 Malicious code in fork-carpo-commitlint-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c0423df45702b5cbc37baf7e71d078b0f9562cb82dc97e1f947dad1e3501d8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...