MAL-2025-142806 Malicious code in ganymede-kronos-oauth-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cc815bc9ad378013849b00f6447853f5648e448a02cd211beacbeb2bc05de3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146846 Malicious code in pulsar-virgo-neptune-relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d348c5d45c13ceca3fff90077a0eec8f7b1a42c825369bf411e763412a08dae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140598 Malicious code in chai-morgan-aurora-commitlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b05a0769bbe5cde0c09615f00b83963a0ee9337ff58ba3d9d9c8b81228f6c87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143832 Malicious code in janus-sails-repository-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b717e4890005e4ec07be65f1916406d5749e4ad38235d36ddba0bc9d3582e320 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145288 Malicious code in native-enif-redis-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 358c9bda4686aa3db9b99f3939d75fed692f50899fef39f730cbfd6189f1b391 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141386 Malicious code in cygnus-testcafe-triton-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05c1dbfc37a1f15e2af108dab30a536018b040f669ec38985a0cafc4f324fecd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149817 Malicious code in yildun-materialize-proxima-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad786dc16177a4cd5009a59ac2e5b60390ff2ed67a4972b4194d5e84a0b9a041 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148515 Malicious code in terser-css-minimizer-webpack-plugin-loglevel-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7935d20d07e495cdcbab1cc3dda880187161dadfe8d56c02d11fa5e642119489 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140961 Malicious code in commitlint-config-angular-dactyl-tailwindcss-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f6a0d51daae52a547b9b3598450667891d02849ff498b84efe3b37fcfd722e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140049 Malicious code in blitz-leda-meteor-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 095653f9eb37e46f07cd046aef238d9dd31554eda3b3b758f09f0d3d76c2d31a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145805 Malicious code in ophiuchus-ariel-module-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c391e8f0c4d182e0ee74a77408ac92268fc1e3afaa7723f59978fa70995279be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139873 Malicious code in babel-standard-nightwatch-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a3bbf98de347e5fbf986b9ea736e9b2918562ec8c586a4d122711b09dbd8d02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140670 Malicious code in changelog-hydra-hugo-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3356433052edf0929bb0319190aaf2c242a761080e1e2ea7ffaf1cbd44dcace This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140813 Malicious code in cli-ursa-lyra-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 404b7635e00676f5a1f01eb0daf4d7a14be165f5c23502d43264abd963cd7c7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144545 Malicious code in loopback-cors-scorpius-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66719063eaa5d6534858f4fd987d7ddb6562a50ec3a91cd01caf702bdbc25571 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144445 Malicious code in lint-prettier-stylelint-phenomic-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e2b262ab41535744cd75ba2de51356f96f98aaba5eefa0ddac512e45ed9ec33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143072 Malicious code in grunt-public-yonder-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 920769a89fcb827d5b2c803bc75e9e94bde3109b923acbc4292bccfb706cb4d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141680 Malicious code in docusaurus-taurus-ursa-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6412a38780f9ef1235e40c5e9de72c1cafe180f43887db2c96e49230dbe5767f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148141 Malicious code in spectron-webdriver-start-docusaurus-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c1aa662d0754a1dc188e33dcb602068d7a09025bfb691ea96cfc640e576690b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143184 Malicious code in hapi-impulse-dotenv-parse-variables-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47665784ad522eb04cacf6b2f03e8ae0ac57786dd4012aa6cff0c9b286a13ecc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...