MAL-2025-140427 Malicious code in carina-xml-europa-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbeb2f166f38c0314f8044f01c7be8a2450007685583f33f3f7419257e11b3a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140489 Malicious code in castor-nashira-grunt-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27d834c00470dfa01b95cf4ff35a0bff673f023a2780d263a43bf0c9272d6451 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147955 Malicious code in sirius-gulp-playwright-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97c521360de0b0ca3d58c926ad007a3d8f6528de76ca5395d2ffb8fc67ee2b88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149645 Malicious code in xenon-grunt-elektra-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 605c1515f7a09e51dec27180935b274edf6061e32b33b0ad83fe5b42f9ce9e75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147317 Malicious code in resolvers-backend-antares-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bcdbeb5f3f8404e93c29ffd571f029c12b4afe279214521372044e00e6e2b9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148871 Malicious code in uglify-js-despina-quark-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20b3da731176ae39466db1b8407ced0bec582070d77f5e3d664a166d70249aff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141789 Malicious code in draco-auth-resolvers-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e01a1e333d58856b3ce23766018ec3198d0aa4fc6404f150f0c457c256b1d104 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139718 Malicious code in auth-cordelia-helios-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b56be2cda1610690770cc88cf64b8c2aa779f2956646cc27082a6a2ad78a58e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143870 Malicious code in jasmine-ultra-magellan-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc63d7a877be1b31e23320b8331884aba215edc7b967e6bda66e1813e04d2b17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140086 Malicious code in bootes-npm-nightwatch-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78ac99d493dc23e9056d3b5d36fa33e25f6df4dfcb9698aaa30abbbb5a315d3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142586 Malicious code in fork-duplex-request-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e738a11e30835b56b26b4fc6d11d4de4707343ac26462423c3509933099f59d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142449 Malicious code in fetch-jasmine-frontend-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfc5d365dcce5e2b678e7f28c3bd51608c01363800de40988c29530bfb10e1f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140728 Malicious code in charon-nashira-sadr-impulse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 471d77464164cfac546ba4f577e60570c874f11f1c635652f7ddc1de60c3aefa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142342 Malicious code in exec-gravity-async-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f0ba8537711e36b7af5ff37c1ab3ce3dab407117c7673478eaa700d75c5296b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140844 Malicious code in colors-corvus-postgres-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2eb7eafb397099447d7894757e36ecfbe2dfe1fc171de2c28d818bd4b75bfaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141467 Malicious code in dagda-eleventy-phoebe-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 225c1557e1ea9c96419fe41d8f0b51e1eea4b7f3759ed6f2064fa5f394724594 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147063 Malicious code in react-bootstrap-lint-alphard-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3684fd38755e805195dd3647625892859bfef3ea8e3c810285fb6382548a89c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146568 Malicious code in process-selenium-chariklo-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf67a853928b37c4290d3a2685b95111adabafc9c129d86655e538fce1ef91a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147199 Malicious code in relay-cors-callisto-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9749ec9054bca0d033b67273f121b943ff34485eec11b3bab1c3b3fd501e8aaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146880 Malicious code in pyxis-karma-sadr-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65565387abe4beae136845f7afff20c393733be49cf9495c468578986e4cace2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...