MAL-2025-142663 Malicious code in fornax-winston-browserify-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f681f131eb8845d37ee1bdddfdb57567b5d6228bab90e97c2fd18160b3c7679f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140049 Malicious code in blitz-leda-meteor-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 095653f9eb37e46f07cd046aef238d9dd31554eda3b3b758f09f0d3d76c2d31a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144545 Malicious code in loopback-cors-scorpius-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66719063eaa5d6534858f4fd987d7ddb6562a50ec3a91cd01caf702bdbc25571 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142796 Malicious code in galaxy-vuetify-kaus-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2033820f97f916e773d13ef8133bfd0610ebcff696815f0c5eb8325a51bf919 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143165 Malicious code in halley-semantic-release-playwright-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53118a5c23b7cec89c72fab6d9e61d755aa4da3e21bdf6837018483278559b7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147124 Malicious code in registry-eris-grunt-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7589992e4db8381ae4a8bb741b6a5cc07e702fcf848a2966e18024222885cf17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143682 Malicious code in install-rimraf-nova-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27a6bb9d55fc9bbf225f87ea52b6f59a890034af0ab668485ba8c1b7b3b42f6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145357 Malicious code in neptune-elektra-transport-carina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5619d2615186fb3d2337f8ba716e0bf713e08317404287f6c4d9e7596f1c4b70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143570 Malicious code in indus-nconf-jekyll-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11fa6425540ecd5708afa3a9545b094ef19e5c9f10e6bc065e144607a1b562e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143647 Malicious code in inquirer-frontend-changelog-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8c250a136f5d0990b830b851b42d887b841167f96ed2d9628e6dc86facc74ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144464 Malicious code in lint-staged-pyxis-webdriver-manager-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc50e3aa929a131d682c28618a24b80bb1df55cb791d02ab06ddbfd580f66fae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139547 Malicious code in aquarius-sagitta-delphinus-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d591d1973e0d501c44c5aed9f6e6e63246cb03c6205caaad5d1213a3263e4f43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147527 Malicious code in rollup-plugin-xanthus-loglevel-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09d7125875880e5be057a6c16197f00f70d4c6df5ad5728c884a762ff6238482 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149249 Malicious code in vulcan-node-sass-commitlint-config-angular-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bb779a176a4c829aea3911dc0bc2e0fc29f6318b8e37e107ee22406818d887d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141128 Malicious code in cors-levels-babel-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6e3036f605baee68a2b7ae5a594db1d71a83877342ddfc786b34586f7318a14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148978 Malicious code in unuk-deneb-meteor-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17e62a13a5b39e25f133df3651b97fa199b321ebd98fe93315d681ddc4482580 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149817 Malicious code in yildun-materialize-proxima-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad786dc16177a4cd5009a59ac2e5b60390ff2ed67a4972b4194d5e84a0b9a041 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149295 Malicious code in wasat-mui-sadr-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0f3d8a941c3cd94b52f529a2a61733938e427dfadb021a5552b6cdffe5d6a31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149516 Malicious code in winston-nodemon-electron-builder-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bd4fc533ec723fb7ba42bc781479f72f08c672242f24a09e80136673b1b2b74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147188 Malicious code in rehype-tailwindcss-spica-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcbaa22480822e3bd06fffd321d2be249fa65838c2ae86440d457b59409ec3f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...