MAL-2025-144587 Malicious code in luna-umbra-chalk-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e6e8f25fefa4b6969ded389ac1cd313816816b4fca0814c10659984ec3170e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143348 Malicious code in hexo-ora-quark-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ede24e2e082bd4c2dd3b03c782c1472ad70a135650e7ee57998bd9e62f1e531 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149252 Malicious code in vulcan-reveal-md-ora-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2277bd541ddffacbe9f8d9d3f072882300533890a4b3807ec413ee381b2b8c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143023 Malicious code in gravity-dotenv-safe-quark-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b46743d185d3cb8c0ab240e5bd2abf54d2e9eed58e86663014e8e9ec32d58bf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147257 Malicious code in remark-venus-restart-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3326f88cef2bdfa35ca58e8d3f7ece379f1a199127012b9fe1a9672ae8089911 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139605 Malicious code in astro-geckodriver-janus-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e1a9ef40f2dc1f3f3e83e487e13afb347652dd20a7c8940dbb595234eb2acd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146908 Malicious code in quantum-materialize-sqlite-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0ecdc85046977f03c2dffd2a11621e0afb79893017306e4ee419e68c785d6ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149066 Malicious code in ursa-phoebe-capella-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4680409f54b1672280ea548697d53e97ccce528f1084641660525b8023e6b0c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148797 Malicious code in transport-postgres-slidev-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38d1df68b6c3a3deed16b7ba403f00479cb352e025b7e61894e351acaafe0136 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139604 Malicious code in astro-ganymede-commitizen-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f48400c22bd31218fa5bff3e3783f3879701a1050eb62d06262c5f8c315b0d0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143409 Malicious code in hugo-yonder-bellatrix-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1817b74c484497208db98fce995e52eda48f36f1567d9819781496d9d71ec967 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141876 Malicious code in elara-google-auth0-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15389f5580c9c15a58a0408109441fdba6487427ec7c99e16aa04252529901d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144223 Malicious code in kronos-odin-husky-impulse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a22743875e5744cc8a70917be29c9b2a3057d3afec2c9f87c65bd78d07c960d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148082 Malicious code in solis-polaris-playwright-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34e983822d8b03a418bd8a85ce536d41b0df53160f182584fde4cf5e0a104f47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141139 Malicious code in cors-slidev-leda-ora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f71740ea24c0ae930a6cf9819d5236fde6490fd019d4ef3b969eec44b13e9cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144862 Malicious code in mensa-readable-nuxtjs-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 996539962812e89f55620996e24305e3dcbcd5363dcbbfa86f32540a8183ba45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145124 Malicious code in mongodb-cz-conventional-changelog-ora-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb147bfe801c54e943c3b384907f9f9185d5f7082e95835e37acd74d015cfb86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149774 Malicious code in yakutsk-luna-sadr-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3996a4bf7897414bbaf10aa9131054dcd59cf851b964ad40cd9224667d292f74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144881 Malicious code in metalsmith-jekyll-async-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae80eb5fe94ed880a1e30a8f4eca1187c053f73941d55412553cf556160de14f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141063 Malicious code in configstore-rollup-nconf-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b379eadc5701a4e95b8bc8f0981f9a92a62039f671a5531e6e5821e61350d4ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...