MAL-2025-146268 Malicious code in pipe-rehype-browserify-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d69b84626d618a7dcbb56919d1de00304d16f4b5a4aa87afe877e114e520c26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149206 Malicious code in vuetify-delphinus-rigel-helmet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d92fadb7b85c2e89b10089a57a32deeafbd27adb0fc4983fa35668d33e523531 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147516 Malicious code in rollup-plugin-fomalhaut-pegasus-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5763019dd989f8dbbf267900bfeb1126a620a032c9813daaca52b3a21676a6e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143615 Malicious code in init-bootes-radiant-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 050a045bc10e41c3926121ea922e01fa47baa0f522d718879a886b21ba3357bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141418 Malicious code in cz-conventional-changelog-eslint-config-server-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50e3969b8ec88d2889697f34d76d21306f4eccf27e7802b4fe056dc0fd3bac7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140540 Malicious code in centaurus-arcturus-prettier-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04cd34978d0466f39ad12f91aa649f65f0e96d02b2fd1d6860accb169bc82db5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144587 Malicious code in luna-umbra-chalk-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e6e8f25fefa4b6969ded389ac1cd313816816b4fca0814c10659984ec3170e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141656 Malicious code in docusaurus-cluster-alphard-phenomic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07b84c12202454bd02ae202474f478a23b79dbfba994093185c385a0a8198c8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141169 Malicious code in corvus-webdriver-manager-vulcan-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5135e94b844719cf58de133a7f391313a0e7400a94f34c8c5c86d4ec1814d2da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141599 Malicious code in despina-json-standard-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f8bd6b352029ad45252a1342f1a9e98156faac7a089148feeee497d82180982 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144223 Malicious code in kronos-odin-husky-impulse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a22743875e5744cc8a70917be29c9b2a3057d3afec2c9f87c65bd78d07c960d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147020 Malicious code in radiant-proxima-dotenv-safe-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09cac62cb9136b42af9e93753b4d8863a059f0e4b7df80eb6aec0f46a5de515d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145084 Malicious code in mocha-kastra-proxima-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e3131eee4d05ed3a50f61cb6e00d4d6458940daf667b3ecc4555959c89e89c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oberon-sedna-css-loader-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63ebf2af811d1202c068480a5d5d14bfd24d336da782807d0ce9b3dabb926499 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in procyon-nashira-husky-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d8239a6961f37959561c688b0fb1c1dbb97528ebe003447f8f0e644095e4de7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in request-kronos-elektra-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34120f381757b55e7a773b70ae46151f71974274ab08bcc6382fb88fc45bb9df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in procyon-non-blocking-mongoose-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ea88450080d7164cdf4c38d5dac58f5320ab57cdd25d5d0307da65f884d7ac0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightwatch-triton-equinox-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c13ee17a1a11f62310bd6043d3296351b281b50f31c46091754519d19a34fa87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alphard-test-dactyl-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dac07eed232bd602bb75c1b252ee185d4d14cbfb07298839ba8056d35a032c7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yildun-xanadu-bootes-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7a8e9f820d9fdcc7495d8be7342f3bc3b30c703f968aba70bde677cd39a879c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...