MAL-2025-141935 Malicious code in elektra-acamar-equinox-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 030c3556c12040d6b9df31c7bb5424883e630cc2ee0b0e91d4b4a629d6d0b567 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148704 Malicious code in toml-commitizen-mocha-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a3c9f78b8c8242cee364e3e2ea4760f0e8414e5fe097e2a049ec4986f542423 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145144 Malicious code in mongodb-yildun-event-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 415b4bae99cc9b1568c32a6c2a8aa3eff44332f1ed641713a550cfb1969e937e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146962 Malicious code in quasar-transport-spinner-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce1d6a0636d5218446d56d763786f84428863756f135aa1a6dc761a0c94d774a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144804 Malicious code in meissa-flare-thuban-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46e1b7982a0ebf5c13945e41d69ca106c0e229e0026f308ba872bea0d4985002 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146907 Malicious code in quantum-loopback-element-ui-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0063ea8e4d2bc6a050c399537e5a25d2bc5e8d15ce2b5352dc33293858aa0952 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148969 Malicious code in uninstall-sass-loader-pegasus-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91affc7f9bb256fde82c4268b20d43912ffe30773a0fae9ed34039f4e000131f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141482 Malicious code in dagda-rate-limiter-webpack-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b9db708a3dfc3a2df8e8c12f9f220aadbc59488cd39507f0da1c86bc814b40e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149027 Malicious code in upgrade-prettier-plugin-markdown-capella-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 731ed6d0ba1d862841f5a8bef326ce13d517ba36801ff1fa33fc2b104643f807 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143235 Malicious code in helios-impulse-meteor-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94a30ebdf2d02c41b22077fb82b20683bbaf0a69357bc49bb96ea654f422a445 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149797 Malicious code in yaml-nightmare-command-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22757024aa3a3d10664748a50311b9182e726fc4abcde0b54f43b750cb3c57c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140767 Malicious code in chromedriver-dione-server-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 976eaa90b831e7ef63ca530ab6f33c384b31fd9790980dc34cbec5848ef7813d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145162 Malicious code in mongoose-pavo-arcturus-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdb3646c653052b4f7657c65572c429be051821f24a9fb82a8bc96c3fff2cd0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148625 Malicious code in tethys-non-blocking-hexo-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d885f6678a047d144fa23ca12189e3691db1ed724e104927120acef8a43c47e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149403 Malicious code in webpack-postgres-draco-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 765202ad2c860e75154b78975f19a9173bd6a6acf4f554a2f5f02825a71f85d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140990 Malicious code in commitlint-jovian-exec-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2a83712f940d043472046dfe7c051ea32c09b485d15a401d1e980e1167464e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148708 Malicious code in toml-cygnus-proxima-jabbah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4194b5c1fe6cf03d68132eb00a7abf5850a2a63b9ef0a9547447561276b22041 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148592 Malicious code in testcafe-equinox-rate-limiter-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 830d11bb383e202f127224d082db8697943104502bf0c48ca97a4f120141df74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143514 Malicious code in ignite-halley-jovian-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 641352305dc2f90655fc051c707ae15f10e5b860427930d87e2b807717cc2ec7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140087 Malicious code in bootes-ophiuchus-phoenix-pyxis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65cd14c888f39abec4719ca970ce1f6297c3c19feece2bd1c5db6e14e12d9028 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...