MAL-2025-143199 Malicious code in hapi-winston-halley-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ffb4375f00365f06b4c9ac37c81f570c287f324505bbc1a3f0f648ee87cba9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146856 Malicious code in puppeteer-nightmare-lynx-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acf9b9a4d323551112c1b97a4bf77dd72a6a18b3f8deda45f95f89e1e48f6f18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147851 Malicious code in semantic-ui-leda-dependencies-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cbdad42f05ae6cec01ed8b7b3e027c1b1386cd3c563a1ec7aeef9f8f1e1e54a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143049 Malicious code in gridsome-orbit-sqlite-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7457bfc70c4639c65ec616e7e6c19be1ebf923ae82efd9a748be1d226a51b7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146964 Malicious code in query-bellatrix-helmet-spectron-webdriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea2fcbba4aafcd8739a6c5c1f7fb79638cda46c72a032d077c17689398101f49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148470 Malicious code in taurus-kaus-server-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b7bb0fb0cdd24f0b62b321af0a5366d6e6918552563a5647bf9fa2c345e93bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in node-sass-eleventy-framework-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22c439566dd8300ae3d8feff2c2e803e331bc48a29f7f65d2c864439ffa019ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146176 Malicious code in phoebe-rimraf-transport-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d320839b4d250dc51a6c8d4afcf02325f2d067157ca501e732ebea5362aa8ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142986 Malicious code in got-run-script-proxima-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfa04a34a8e56c5c772f14564f419592876e974653aa8279f0dfc3c83c0256b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146132 Malicious code in phenomic-eleventy-dynamo-mini-css-extract-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac8ffa5a0a2483040dc326a5955aef7ef99f3a3863e61f50c2ae5b4f40e8491b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149835 Malicious code in yonder-corvus-semantic-ui-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6257c44e54245534f9269eb8c317701f310b8e97f0b8feb397f7d590e1691323 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140717 Malicious code in charon-apollo-ganymede-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a453ab8306131fbef52d8e12174348e51bbd1e7c604b02ca83a55b33e146a9af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141548 Malicious code in deneb-markdownlint-venus-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9072afaa134e1e2a0c8fd4b490cba7e97b3f7cd3d0a7707a1d0e64a8aca1f89e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145230 Malicious code in mutation-rehype-semantic-ui-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c63b37a2968b52d30a65cffb26b3cb03a9d59890b2e68c2fc5d0da907d08f082 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140685 Malicious code in changelog-spawn-spectron-webdriver-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbb9232c41cee975e4e3646f041c2c10d24472a10c0535ca5b38420c9aa76bdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148214 Malicious code in spinner-venus-izar-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d22743ffdcb88a3ad3f6bc32150254dadfa3f45695c7f11d0e9a16ea3ac1d126 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143994 Malicious code in jsonp-configstore-janus-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6491a1ad6532064b4525dda0546ca266738df9e868bb54a32043160081b02742 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148848 Malicious code in typeorm-loglevel-xo-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0305db97622e16a28e033c862c4a5ef154902714f851182e21673992a75da64d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144698 Malicious code in markdown-pdf-oberon-rest-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6736e26ccfb46fa55ed3f0c9f17c3723e146a0902526a7486246a1f5ab8b426 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139752 Malicious code in auth0-materialize-electron-xerxes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ed6bade7d741e881a1ad5db1fc1aee5b73c774ecea26fd42ad6d9811499188b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...