MAL-2025-146169 Malicious code in phoebe-pavo-grus-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00a2a606b8dcb49d586718615dca3a20876645f3d5a3d5f21e04dd421df311d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141058 Malicious code in configstore-markdown-convict-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27545746f4c3e9130cde3a5dbb4003c04061195eb37b9546b96683d306d649c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139761 Malicious code in avior-apollo-oauth-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b1b3417cb0939af2d7ef1ffe7ef71b3fc5def7e905d096c43f0169cd5108118 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143058 Malicious code in grunt-cross-env-init-phenomic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34decaafc378b9a592dd5041b73feaad1354d542ee8269da457cd618683baf7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140893 Malicious code in comet-tethys-phoebe-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc78fa48a337684e6465a66e09dc89ef50524700c030b2af9dcdf128f864afd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140284 Malicious code in cache-shelljs-europa-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9f9bf5aeb82678510cbe2137300b8fb946e38374af64295bab38733b1bc607c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144397 Malicious code in link-async-global-reveal-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf9b45fa02a6e71ab581e7e6ce2fa292132a4030cd9f32985377b6f7eb975e24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147314 Malicious code in request-sync-magellan-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c79f1efc842b2ad8058b2585be7a3aa35dd20a9bd08e234c21471a77b6ad3e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140578 Malicious code in ceres-taurus-quasar-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7528419e46c0d12809177e0fa4d0f3c6134f6880835bed163f9c24fd3a11cb62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147623 Malicious code in sagitta-supervisor-publish-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5de9a0ddb3ac825b2c032dd952456a12fa1dd6793f53dcdfedbc6229196f808c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141325 Malicious code in css-minimizer-webpack-plugin-eleventy-writable-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16c809fff64854b81d5e2dd566778b8b3f0b3593ce2d0a3267e2f2772472b028 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143396 Malicious code in hugo-prompts-install-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e323f5bb8d985d0dc02ff975746ce4d5f88126d9da820e1d55eb820e3a144653 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mongoose-jovian-perseus-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b8b0a923dfb3778323f2aa7e9a296eca4f85eaa61df4e5575c5a388aa02f07d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in library-apollo-sagitta-relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a145c3f36268692e8ce0afac7243096912fcd83420501e41bb6a4862e17a788 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rigel-bootstrap-triton-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99fdd7d5010c8bed6bd41e03d61290b096febab526e48988e139d60019cbcbd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146653 Malicious code in promise-uglify-js-chalk-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d217294d5c2c2e64d732a8ea1fc726b9a504ae3f6a023ec18b1f4fe46edc6187 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148863 Malicious code in typeorm-unuk-dotenv-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0ede693b2a0091c7dc40e54e02994f3841f5d5018a0a26d1ce22f4216b025d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140196 Malicious code in build-ursa-hugo-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7043ea5597e37c18599f3323abe2d66201a04519ca5d9b94a7f1aa2905a9506b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143168 Malicious code in halley-spectron-rimraf-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e73c947e71aa2563113e69cae4a5ed27b095147d625872993d40c732a020be3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148384 Malicious code in superagent-kinetic-vega-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f052313de57a449d3ba0452395a8a82d566127cc64dcde2d2840853d301a7270 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...