MAL-2025-146558 Malicious code in process-mysql-cosmiconfig-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4955cb99431235505cbe59ed6497b1d38a001b5e13cc6d6dffea67900dd399d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142112 Malicious code in epimetheus-uglify-js-figures-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ba4c6c38b08a1edcc6330d629aab361871c08e39409c9f9c85f472c1eb1503f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140386 Malicious code in capella-duplex-upgrade-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ea0537e1d4f6441625d140f225246350b2f419c999df9095d0aa0b6fdd48e10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143890 Malicious code in javascript-scorpius-global-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a295c603b76a38d618d9f50be6f6317eb946aa55b04eefa49bfe10b3e03fc9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148149 Malicious code in spica-airbnb-pino-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b41bcb691b34ac087839ae6fbecee64c8eb6f8039658ce929656436fa9030fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147005 Malicious code in quito-subscription-neptune-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70002200c66b5b4cc0f28f3f46ad6a34726cb88aae438ffc6a091fe5ed4e7af3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145637 Malicious code in norma-cressida-wezen-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c325aea0435d135ada4d781fcd39f53000ae8c2fce613106b6a0e4fe51ce8a50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141361 Malicious code in csv-ultra-wezen-astro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1858d3c966b6f580575064487e3a89444dbbd196a7324183c8b834a2b42ec59c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141078 Malicious code in convict-loopback-ganymede-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 104427287b6201291737d63904d566b88badc27604dc3788a575b97b3de23343 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145786 Malicious code in octans-virgo-polaris-less (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21a6c40da24b1f4141514a0c0ebdf430fba06d346f9ac74cf39557bebdeb292f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144277 Malicious code in leda-javascript-stream-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dfd3a055aa44ec2cd08f62a0923cc30385a0d9d25f8e1cba6f22dcde9d89345 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140076 Malicious code in bootes-despina-capella-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d23d6d6dd2fd50fbfb69d2a5c2e9d2d735e5bce93f882407139e9ebc1e18f011 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146259 Malicious code in pipe-await-got-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a40e789ccbb5f530142799e6b4432dd8fbdcb5229c1554268b72c421195642d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141245 Malicious code in cressida-soap-atlas-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afa32ebdf6c7a36c0fbaa79db2bb78384213d5a5f64c6f78fc4f2811bc97f85c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143466 Malicious code in hyperion-bellatrix-carina-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08d1bdf4a11c0a392a600e12d08a06142d23cf402e33d975e8db903eb91dfa73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147309 Malicious code in request-repository-meissa-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ebdae1a304ea837869b374cdf49ce53b0222699e2e9a16802224a64ee89f49f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142757 Malicious code in gacrux-configstore-andromeda-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08ca62aa2ca7610c4cd5bf3fecb7bf63064685d407bcf3e930a3eb2824e01641 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143389 Malicious code in hugo-io-commitizen-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b14422502a986da3f3e8a3e58d27382f380fdb312eedf3d04e62baee24a4dcd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148197 Malicious code in spinner-geckodriver-framework-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11eda0eff3a31bf162a1a763e086ba1b1fca6028f2c5d4fd7921103126177464 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148029 Malicious code in soap-pavo-barnard-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c60fb41ebbaf22e751bb38346303fce0e6f2ea2eb0e75b6a3e91c73e8781911 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...