MAL-2025-145735 Malicious code in oauth-jsonp-figures-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8a6fc5daa675afd58f702aaa8ddb9c7219d1acfc6d3c64845b81303a29c9247 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149113 Malicious code in venus-hermes-lacerta-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79996a3e99ecc6f49fcc9fe9b797330b934a6a4067b96327cd37fb554aefc4a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139302 Malicious code in algol-package-eridanus-deneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1057491a5f763c3aee989d6320ad66df16fb3edb640f89c4b6692387f56f530 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147375 Malicious code in restart-chromedriver-release-it-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfe172d0263d176252f36ca0e3abb515eb8fa57a8803cb6407ad3e2078c1b151 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140873 Malicious code in comet-cygnus-antd-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba6bff291e01fd22857014fd822605071aa490ab3fd33da969a70753a7b9f34a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146052 Malicious code in pegasus-sequelize-antares-jsonp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40c7b357b282c6107b66be25d25844369b3d99f701ca4c7acdb78e404c6d9d3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139622 Malicious code in async-centauri-sirius-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca14a1da00800015fca446d7d09a88bfc7acac6b6e0fc7317667e1f503deaf6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139416 Malicious code in antares-iota-grunt-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a774dfb8c1801bff6640839e466dffdf8f5fb9e3ddd4f4119baaf7c882cce8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147425 Malicious code in reveal-md-query-gemini-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bca14348c26ccfabf91c669c1372240b7bca296b2bdd6003bdcdffc57a236249 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148277 Malicious code in start-norma-izar-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f6202e4dd1c6acb703f9349e84d06f1a5c9572de5e85b4679f9f4475475283e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146783 Malicious code in publish-ganymede-cosmiconfig-xerxes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8346c1476dda7d46c13bc79d119a9eb3a5dcecbdfabfa1d013f4c6ca36e55b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148755 Malicious code in tool-stop-magellan-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 425754f6af251723808e87b0e68201bf2b4a32eae0c5a5bf3b342e6f57b62f06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139465 Malicious code in antd-repository-nightwatch-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fde768a62bd4e0456e3d2fc3c4821ad83196bda6f38a03574724730c1a7e44a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149264 Malicious code in warp-cassini-bellatrix-lint-staged (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4cd229f989d96ae7a463fc05e63b1f0c0148d0becf9594c760d8e6fc3045732 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147084 Malicious code in readable-kastra-spectron-oberon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c735956c75064f9891f712046ee262e3c75e0ae2c4038ec4b4b938928e2991aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145637 Malicious code in norma-cressida-wezen-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c325aea0435d135ada4d781fcd39f53000ae8c2fce613106b6a0e4fe51ce8a50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139838 Malicious code in axios-spawn-metalsmith-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f3bb3d243839289eaa35ed8d5891af6115202b3b623619514dda00aefd13d2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149698 Malicious code in xerxes-astro-axios-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 715eb9977b60db21113d42c72537866a7b61a77c97d0d16502f45a0c2cfed184 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140657 Malicious code in chalk-sqlite-perseus-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39dd13a66f57e4eee9bd5613276ecc1461c81ce7c70468fb5317b71fdfd1ad24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146945 Malicious code in quasar-cz-conventional-changelog-aquarius-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73c86bdafd407c357b4e5f009e701e69157cd73df2a754c63ee12fddba5576de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...