MAL-2025-146266 Malicious code in pipe-prettier-stylelint-fomalhaut-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67ac29fca3ac3709645dfc3f811b8445f16d912d8a52b86c2ff781007970a518 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148625 Malicious code in tethys-non-blocking-hexo-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d885f6678a047d144fa23ca12189e3691db1ed724e104927120acef8a43c47e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144619 Malicious code in lyra-winston-nightwatch-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fe6bca6a2e77e7c2a22c4bbeda5029b832f6a63e482c2177518ac885e4ecc49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148234 Malicious code in sqlite-orbit-xenos-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c86265633b4b5b2fd5f73dca2afde3e2809e8e36c6b6783188ef1057a4bb075 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146361 Malicious code in polaris-playwright-proxima-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca7ce5a8acc186e4762e4831633d633f82fe9434b7428f24bfe3ed5bbaea92da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148413 Malicious code in sync-adonis-rate-limiter-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df5dc33b4b091bc26ce6cac112f885cbde0319831f4fd7aebc4e645088bf967f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147938 Malicious code in sirius-ceres-fornax-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6f2388b163e7ec37eda82704f0e6b2e1e2e914a06832c2410f70c506789df1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148294 Malicious code in stop-firebase-mira-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5306560bd11421c1a58180bfdaa37dbeeac85378079eb898a03a023de9119b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149427 Malicious code in websockets-solis-eslint-plugin-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 127e7780d8d19e0da2569909fab63b7acd7c8241049ab9c677f1c1aa30604d2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143702 Malicious code in io-node-config-rate-limiter-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 930c2a4eb6c0a881eb361c86511cd96aead7d8a166d8915012d34c8a2e936537 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139628 Malicious code in async-json-metalsmith-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d3de2ede2b17ab92f94ebfb9bc3a04946b83f63dcaaa1578e8dfc673d1438ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loop-xerxes-markdown-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caea6f928ba904840092e84e5064e8a5fbe2307bcbf6aaa7c91b07e264cbb141 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lacerta-electron-gemini-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b7e0b7753b1e3940c0e8d9594dd3fa95f29c0b4284b8c99b957e293100a8c9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buffer-phenomic-miranda-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 797d2e82ce63670112679026f7d3cac4b6e5ca661260cd094fd9a863dfa5e963 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in development-kaus-axios-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7f9e940d8b489a1c7d65f3dada82da97fdae00577eda2b6069959b4bd015d4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chromedriver-fornax-stop-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be70b7b1e7d4b70f16763b44d920025a6e3d26eae494c87e150d068726f876af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in global-draco-virgo-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac8da2ab4b62c8dd339ff475a68b7c495dc169c8043db895cf6966aa61fdbd81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in procyon-element-ui-uninstall-less (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5c9482de78b8db351be096255e8d470475ac1af6f9f421925c5db2d0e149ddd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electron-altair-dependencies-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8721480bde7839f065da67a511979ff2fad4f04e3c8f683f814db27282212288 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auth0-remark-rimraf-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 714ef1f3aadd820dc4f68eb12147374722db65daeeb986feb08523154cd2607d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...