MAL-2025-146175 Malicious code in phoebe-rehype-style-loader-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cd9c68db65094df4f1ff7de4e1846f61961d90dbd20b968662d96ff11894c29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147598 Malicious code in sagitta-helmet-vuepress-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ca2a0f227ecf5dbd238bdb4fdf614d28c9f11da0fb859e447e77910ac1e113f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148018 Malicious code in soap-csrf-sync-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a0c2f22baa42188e2631d684d1e40fb625c164578e44e42c3f580ecab9fe225 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143608 Malicious code in ini-supervisor-ini-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b29a32dd2b265a29cfbec53f5ec524396621a56b1ac1096d46802296fb8d328f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148408 Malicious code in supervisor-vulcan-remark-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bd09e647755e974ce82a7fe8fa31384e0ec5533ca9d8f84489011c9eeb5e7ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141990 Malicious code in eleventy-aurora-csrf-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11bd61603a8d9897e58648607455671c4b3464648f4a3f11093edac31e0a73c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139474 Malicious code in apex-castor-gridsome-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9838df6fb8cb5dd397939668d3b47a828bd69186f05c69811ecc477154c170da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146240 Malicious code in pino-pretty-markdown-pdf-altair-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 573304594207ecf8910723db18dc49d6e07edd5c5aee43c6a5ddea60ab7800f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143449 Malicious code in hydra-pavo-taurus-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15061f0cc0e121caaff0c51e817e1426d95c40b7d140db63c1f74c738cea90d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141432 Malicious code in cz-conventional-changelog-request-axios-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2893e5c2e75e23ff044c882435ef17ec60ab89de147a37064ee46865b515f786 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139331 Malicious code in alphard-neptune-nashira-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c91a961cb47f375ed243b7963cdcb585a59ead67e3efb4f59c6066995c3c1b01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145754 Malicious code in oberon-redis-luna-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a7dc99789c6a0bc0bffec45b88cad0cdbd527b9612b08e1c1088d1d9fa367c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144254 Malicious code in lacerta-warp-perseus-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d114be1fc47db70d408c4ef91f54c6e59def37f58a787a130bd55786b6671395 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147176 Malicious code in rehype-meteor-pegasus-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73fa9c9bc7d00cb76bf4363eeb00bf670efaa50798ea6e6eb8f5a516d613d61f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141686 Malicious code in dorado-concurrently-process-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76f20f6ca0676e9eff129a6b427fe940ee7a2dfa15373c2680bc0f47c155ceb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138861 Malicious code in mature-beige-turtle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46b58ac1ce1747ab82066cab5e94a6bbb54369ba4c18c7646b95d182045d2e73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in living-amethyst-otter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6486a5d43474649c11227f0aeb85bf1a69e39679f755b9069d017290d3e1f4e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in heroisme (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b6e16d141e590aaba3c9f7f6e4903a270e1f51fa0b246cffd19585209ea0962 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-kue83-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50d2479793bde78dcbf7e904c847e06b888ce8a3669b8e35c667aa5b63b92156 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-otak-otak61-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54931d8eb33a133189bbbd8dc49fd7fd8f67dbae591ac564ec5cdebd71fa690f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...