MAL-2025-146931 Malicious code in quark-oberon-cypress-charon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc7a7a95f173567a7db152fdb4d4110a7c2c5b984a40dd6540fa15a585c04358 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143373 Malicious code in html-webpack-plugin-sync-perseus-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d54e21caa1696cf3cef247fe0d1e27b9dc0c37818e8ab73e05d4850ef300030 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147154 Malicious code in regulus-phoebe-corvus-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0151e5068dc5bce9091a6d205c89061fe9513c7fc09dd31cd433c06dd39012bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145883 Malicious code in ora-europa-tool-norma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e006f42e194527ca2cc8573e612feb59b34bb39906c9d9544474f1576887f5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142059 Malicious code in enif-quito-spectron-webdriver-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59ab05c0abe59e44166b054374c43449336ba83fe938e39d8214b4c678b52ddf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143702 Malicious code in io-node-config-rate-limiter-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 930c2a4eb6c0a881eb361c86511cd96aead7d8a166d8915012d34c8a2e936537 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144902 Malicious code in meteor-chalk-csrf-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0aba9b08ce2f5a603c22c08ef31c975f98a0baaed6e08c137c3888d64fac1c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140202 Malicious code in bulma-antares-update-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da90409dae49766f73cccce1aa6e68c01b0cdeb89095c307fa9ed01a6e3d9d85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146447 Malicious code in postgres-sails-jekyll-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c170bde2a901bccd8b720d04cd1ea7242dc06d4dd4124518eb9fe8c5fe30e49f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142512 Malicious code in firebase-sagitta-tool-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e9f0e4b922b003c40ad9a7753fe86040398d2220a37c9273a23abf24bcd4318 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149537 Malicious code in winston-zephyr-nuxtjs-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 912f6a1d7d2e2169fb6ca024f4ffec9fecad6da1c2231d994c692d1a85486a8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140198 Malicious code in build-wolf-kastra-lint-staged (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d03dada7cfbd3c9b525f4da20a53923820753281a805f97771a572db29d36a67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148660 Malicious code in thuban-parcel-fornax-nightmare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61a2162f7ddcda39a5718acfc616b26db22ce8a0e0da7efc71531e95185cefd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140452 Malicious code in carpo-semantic-release-kaus-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77f109704ac2f7e249ef4083f207485a8d26ee826962f8c0a3ac0e7a23f2f4bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147810 Malicious code in selenium-registry-capella-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09ab3f71e7297e293a72649daae86808b298edb1456fd5e8450176bf422af724 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143911 Malicious code in jekyll-norma-markdown-pdf-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fadcdcc348ee3e2427e061db339471ee520e3dc223c25f9e41dd0092d58d434b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139871 Malicious code in babel-react-bootstrap-cache-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f07bcd268303bb5427b2d483a7bc87f4715738e050d7414c8569c27ef5e1245c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142004 Malicious code in eleventy-mdx-cressida-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7f74c97d401a134f9b646a3669fbb031a73c2e27575285bfc7e10c686d79f91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148969 Malicious code in uninstall-sass-loader-pegasus-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91affc7f9bb256fde82c4268b20d43912ffe30773a0fae9ed34039f4e000131f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apex-unuk-postgres-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2d1447c5e950f107cc81a6fe64c2aeaa1436875a0f78d40c72824ea7479ca99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...