MAL-2025-146360 Malicious code in polaris-playwright-pino-pretty-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c8892c21f6df4f87c858182cca8bee21e62506e8c59267e6e6ff77129b8089d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145573 Malicious code in nodejs-pegasus-rehype-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd0ea20bfda57114b13227d54b4867638669a04fc1721663633af6db03bf082f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143084 Malicious code in grus-barnard-algol-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9a41843bb97afd8f42d65fdb530b4f04cdbf9e62375b7e006bad94d857d4c37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140559 Malicious code in ceres-configstore-jwt-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49b37125288f59175aae4e6dc61e0ccea7b4160d5711e3420d95b347159ba37f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141961 Malicious code in element-ui-castor-janus-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c8deff50d4c12539320cba70961010bacf4da2cfacb3f5ecc994ecb127833e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145619 Malicious code in non-blocking-prettier-plugin-markdown-enceladus-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c410beb76d57deeff1423e4a69bd221b151286e7e4b5237718fee546aad5035 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144031 Malicious code in juno-magellan-acamar-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e99251e7b6d6da522255aeedd0b8687a7e623c19e891943c12469e07c795ea3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147036 Malicious code in rate-limiter-draco-hyperion-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93333596259493e28893358a021b47b9496a3cfdf099f46a04593b50432471ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148138 Malicious code in spectron-webdriver-restart-cluster-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4c417cff21456035f8c3ced2baa3c4dadbdc2048dfdb5510a34bfe0d3ee045c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139928 Malicious code in bellatrix-centaurus-toml-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ebdb2e51245207a285797bc56d9291bf5876105e83d7392badb56818a5c0e06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144257 Malicious code in leda-async-nodejs-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 919099f39c4c627753c0eacb2c31a393a6a92e02b8a16c383406fc50a41281d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in javascript-nconf-ursa-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec6c388d4d528181105b95e70ffbfcdb98a70dc29eecadcf4e7ffbd9fc7966bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142688 Malicious code in framework-nuxtjs-sedna-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f5259e841b741ad81487bbaa050e3336e687c0db66022001ceb0831d8feb00c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140726 Malicious code in charon-mdx-mdx-rehype (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b3feffdbab66463b83704d077bda0e4f7018d3e997c56702ac197352b5b38ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140943 Malicious code in commitizen-start-radiant-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e86fb0200eb91237b731b34977008855e4d540ee3c1840f3df98357cd0215351 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147030 Malicious code in rate-limiter-babel-package-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7c012dab347c3e3e7f352b84d6995cf56ed90b0ff646e3e3fcdaa6e351c7310 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149360 Malicious code in webdriver-mocha-npm-nova-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47c5f0fef0802f17d6acba2e736999a4bbcaa1d25cac8d3897d67847a0380ed1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148672 Malicious code in titan-buffer-sagitta-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8dd25da2ea12c17bfcc8b82c1f080529ed705b80141907868b255187769fd4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146369 Malicious code in polaris-spawn-ora-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b45b053fc5fef77986d950b3d91ce01a07e7dc930d068576f08521050eb7178 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143992 Malicious code in jsonp-charon-jasmine-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71238e390649e49d2401aaea0455dc7e0bb1a22fac50887ed8c53667113553e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...