MAL-2025-144050 Malicious code in jupiter-bellatrix-version-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9767891eaf351f85b649524ef9c02582915d6cd03f4a573811aea342193db68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147092 Malicious code in readable-sqlite-lint-staged-ora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d1e86395f72b0d1c4ca3d9c82e00d107b76b89cc287e27a646f1d01fa40c79a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139622 Malicious code in async-centauri-sirius-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca14a1da00800015fca446d7d09a88bfc7acac6b6e0fc7317667e1f503deaf6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149787 Malicious code in yaml-eslint-eslint-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af85ec1905427d26a8cb76ef206a0a384fba45266e161ae68cd007fa65ede164 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141316 Malicious code in css-loader-soap-elektra-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e02bd7db49f120b636f5d8a86022af64e2403f9c6397fdaa301235a9bca6c2be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141328 Malicious code in css-minimizer-webpack-plugin-hyperion-websockets-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00e20a22a9c22769398e8739c99b3cb32ee807c0d7b81540638278571f89a9d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144809 Malicious code in meissa-ini-xo-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dc70c450a64a22896397ed0c5c435ee915be7a5a41639f799b2c2c55782609e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142537 Malicious code in fomalhaut-chalk-hugo-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 971e6e1e3334906cd75f5b98aa72feec872bad9119db2e22b00b998350a828d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143684 Malicious code in install-sagitta-forever-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6c5266316882adf444b57e1705002258aa5f6cd64e504264dbcb91c1ad0ffb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144024 Malicious code in juno-elektra-tethys-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccd6a416be129d48542f77dac831defe147dcb7b21c8048a07c1b70bcabd3b76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147611 Malicious code in sagitta-publish-less-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e31faf24c46477d774d93db7d78b3c39311f6669c9cefc0ff371546695dd8b89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144723 Malicious code in markdownlint-lacerta-solis-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a350fe7ddc11ca9a567e3847734b551ccef89edc4b2674c0c9470a0aaef37b1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140388 Malicious code in capella-got-norma-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 378a90563bb59c066009d1f716b8397f7a9794d238c740fa8209ae523f935e56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149828 Malicious code in yonder-acamar-terser-webpack-plugin-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d67598092c99278899708ccaf956db5b784f63e8cf0fea187c25b581869382a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146564 Malicious code in process-prettier-plugin-markdown-ganymede-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa72f918996786d3235c35e1d15645cdc1aba81c886ed26e2d88453654fca1cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139364 Malicious code in altair-rollup-plugin-jasmine-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7625cc7f00ba415476d51028456721c1a2a9a528a58a856ed80654906ce82da1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144708 Malicious code in markdown-pdf-sqlite-zephyr-warp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 195291aa189c6bfdaa7f3956ee1401e30637c563743c36d71d9c6e0cd6aa28d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144937 Malicious code in meteor-spectron-remark-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d697b4703e1c8d925411ee9461b6afd064f73b0e033bdf34d42c2627b189fac6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139202 Malicious code in achernar-morgan-gulp-octans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a498c5b041add19cd34cff6f6ea4b481d4f6807e31d95256fdfcc433fba769e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146231 Malicious code in pino-pretty-comet-apollo-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce0fc55dc02578c07a1ca82888f7559c7f7490d510463dac842eddb8680878a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...