MAL-2025-145495 Malicious code in nightwatch-vega-pm2-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9721711530d3774701e2dbb09bc46c5e32016b8e64cfb20ad8261d43bf4fa1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142506 Malicious code in firebase-optimize-css-assets-webpack-plugin-csv-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa2058169f40e2d8da83d235c589c131dee6270a5bd1a819b0edd9873ab06714 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145593 Malicious code in nodemon-rollup-dactyl-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2b432f0b0c2f9f89aea56397185205c9ac09c7aba0ad4d26bb0190b556c801b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140144 Malicious code in browserify-titan-global-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89b5bd569a9c96ece259d7846c2b2e67aedd1d9323c41a817f8451d98e0700a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144115 Malicious code in karma-phenomic-standard-mdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44e33101a4daa0982432ad2fd50dddbb6bf3d524f23b9ef2235151a69c67e0cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142281 Malicious code in europa-miranda-scorpius-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c20002f8e415d5893d06df3ac728b8d8fa4225ba36d8aefb512a34f2dd94a7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148655 Malicious code in thuban-link-bootstrap-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 733981bb19ff12b4cfcabe59bf6a8a94808fb30163e1dc15d296f1c523f55cc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144686 Malicious code in markdown-pdf-cache-apollo-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b3815f58127f89e6f52171beee5149e5ca18d95ab4a7b7434c014b0b5595525 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141359 Malicious code in csv-subscription-apollo-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41d87b5a1516b2518c854fa644e90a91b1a468ffd9573c8e3afdc5a5b68de7c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143489 Malicious code in hyperion-morgan-start-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd8a1f833731723eab33bb2157f6dd3737d4498b61a94a6d4279c80dd713bf0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147877 Malicious code in sequelize-socketio-juno-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8d6764d25deebfa43d5328d1f3bf9f5622e17aa5105592f702aefadab7aa8d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140441 Malicious code in carpo-ganymede-kastra-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7afb774a53ba565469f8094ace021d2bfe40abb0b43530b02ab62cd932873e43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139399 Malicious code in antares-config-mutation-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd8607db0f5cf2f8df42373224d4090df0a43cab1471cdd21e6c2bdd337fe782 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140524 Malicious code in centauri-chakra-ui-upgrade-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c97d1732e08f808b9dd9c74b462e75c996c7be35f851bb79e18d0eb37147d24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143444 Malicious code in hydra-hermes-weywot-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f42a1d329c45393542f9e8ec59bed9df73c594eee4af007134fa1f73d8b3b75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148978 Malicious code in unuk-deneb-meteor-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17e62a13a5b39e25f133df3651b97fa199b321ebd98fe93315d681ddc4482580 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141083 Malicious code in convict-polaris-init-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4c0db221a3ed1a1d284e3d0174535f98041c9d5fee2a0576d99d4514895fa75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144712 Malicious code in markdown-pdf-xerxes-janus-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2927d2275f3a1cc3ef9706981e9632a656fe4473fd8fcd6c14ec07464710180 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140203 Malicious code in bulma-aquarius-nestjs-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 636e9e92806fa50b6cc23210d705eb9f81250588b5856b4937405ab5baaada68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140678 Malicious code in changelog-prompts-perseus-phenomic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c91b5099c9a1d521dca15770fbe00e3e4b5209350710e6d696c2a710094e4a8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...