MAL-2025-144323 Malicious code in less-loader-karma-scorpius-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b1a366b01f8a30156d34848cdfcdfa4add09f451e05d17956ac202817a863f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140435 Malicious code in carpo-centauri-commitlint-config-angular-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47297371af1cf02d6849edb62adb000fcbda44132fb3a3c3954bf6ef90e9675a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139217 Malicious code in adonis-sass-loader-eslint-config-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1227693d8b17d578c1c34349d603a818d74e794f02ca8a1c07433517135530db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142207 Malicious code in eslint-config-promise-jest-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59c4f82e6f2157597c61c7da8d74b237bb4130bc06799b25ab24bc0ef47a1d3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142445 Malicious code in fetch-hexo-commitlint-config-angular-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1275904ccd7fcedcc0f0e16254ee142d90c79cc0ba947d02fe8bfe251f8ffa55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143781 Malicious code in jabbah-leda-install-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d12f6206cdd8066e12c04469916390bf6e9c7de288ef09cf420a09ead8c87823 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145503 Malicious code in node-config-ariel-cosmiconfig-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8511e6c9da4678fdbcc5910ed10531ec1bf199ca08705ff5cc0ffc8eacc6f05f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145588 Malicious code in nodemon-node-config-writable-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57a645b9fd9876fc339f13eaa5d63fc1e9f3c191f707405651a572c7a8da38a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144468 Malicious code in lint-staged-terser-chakra-ui-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0555aa83a6752f98aa45cf50f95aab2be0bb0f5156ba979089b0af5a64a3f030 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142489 Malicious code in firebase-charon-node-config-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8b995051a7142a276f04ec88281667d77e5e1ef909b5dc5770fe7f2d136fe09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140967 Malicious code in commitlint-config-angular-kronos-nebula-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bb22d340281c86896edb316e63bdb92125085062db8479e56d6e07db6cbe92e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149849 Malicious code in zenith-fomalhaut-acamar-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af716b0b5818b706cffdcbca9de8242d2f29ede404e69bfeea745ef34db684fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140160 Malicious code in buffer-levels-commitlint-config-angular-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac128b29c04901328bcb6420c6ca7c26bc5e847daa6dc52991d4dc227b7dbe23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147943 Malicious code in sirius-config-npm-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08bf75866116c886d6513c5ffb9d715f6f54cfd7a6980ebb2a1aed4dc2c7056d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142192 Malicious code in eslint-config-betelgeuse-leda-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7d1950ff7371cd89e9f79ac4f6a18270b302d3dd6f9dca88f95a2cafd66fb55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142424 Malicious code in farout-sails-eslint-config-chariklo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5350b546b48ac29a1dcbeddbd48f6a6bf51e9bc12a6a2bab1c78cfd8c5566f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145338 Malicious code in nebula-config-markdown-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49c6bb56c830026923822e235d12e26b0b1161dd573bb8c095196ba84cc9de38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115078

Malicious code in config-lyra-solis-meissa npm...

MAL-2025-142169 Malicious code in eris-duplex-firebase-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 915b388b7f76911b853fb6047f3e4f4e11e927e0aa88842e90a0790a39b30f5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145378 Malicious code in neptune-request-hexo-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3ed02bd25ed21d5f7601ebb7225bde8001cdb1d7df9b1567c9de1530a5417a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...