MAL-2025-142983 Malicious code in got-quark-charon-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2791fdb726654cfab79699ec9ea9331cf5f86011d5e2d08bda7ac54d9a50486 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143812 Malicious code in janus-grunt-gatsby-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a924f0426ddf06b8ef2466546109dd481e0454ec09d04bba7947208e692a7a4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144704 Malicious code in markdown-pdf-perseus-aquarius-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7617a5dee3c988740b307aac4e4479554aff7a5312cd6057e19a9803e588729 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144534 Malicious code in loop-scripts-koa-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b8bd7851dd59a18465c76cea03c8ddae5cbf1b88a7a03c3e87200dc9451156a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146244 Malicious code in pino-pretty-sirius-query-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c73b7c75b3e6d45e3910318ed625d09bfd01135b8bceedac98a8b4dc0c0101e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144726 Malicious code in markdownlint-procyon-magellan-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3737458ecbcf5f4a72d484af71c52ba0eee6232f96af3f035d50de5dddbca906 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149130 Malicious code in version-altair-jwt-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bf1dc048a8380f039444fe39e20ef82957c666685a75b24d72d792e31f15f6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141356 Malicious code in csv-rollup-dotenv-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbfd376b20d7c927d759df845b61f43d5cd74bc86cc52db2c87668773d234bb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145900 Malicious code in ora-yaml-yildun-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09671570cc0ec4dbf6e1be086b159d12ee823cd32564bfae08539f2b51fce710 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149897 Malicious code in zephyr-standard-arcturus-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adfb0d4f3fef5875a28ff7fe0d5c62702914e16fec1826a64f35118d8a99b928 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144688 Malicious code in markdown-pdf-child-process-chakra-ui-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e96d8d36d4e510dc49ae47e9de40c6c5fa597a27cd1aced5c26512e73abc5321 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148367 Malicious code in subscription-test-protractor-blitz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1172938e85e672a705c123845243e3c77d61349e623171947cf7b653919b6587 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148146 Malicious code in spectron-webdriver-winston-vega-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cc6bf05534f02b480ed0ff958277495405277626318a639399b5bdf20a51899 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141620 Malicious code in development-exec-spawn-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a304c47087ce6235ea11d67ae22402da93443f443c701408982475b773bcb42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147837 Malicious code in semantic-release-sass-loader-commitizen-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f4674a8c00b8aa7f7eb8e8bdbc905e54e284119d17da4639e07eab14a901585 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146607 Malicious code in procyon-nashira-husky-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d8239a6961f37959561c688b0fb1c1dbb97528ebe003447f8f0e644095e4de7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141117 Malicious code in cors-carpo-webdriver-mocha-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e76adbe54ed0e722d8d3f209b3befd182623d2d08f49aaebfd39cfb56e2a177 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139607 Malicious code in astro-got-spectron-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f999588a4cb52296bc68b50e588cdc7434b2f57827ce86ef72b7bf111b292cac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144047 Malicious code in jupiter-altair-sagitta-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2cbf7ce2f61cd396dd92768cf8f3c8b83ebd104b8aa54aac8d1ae5356dca391 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149726 Malicious code in xerxes-yaml-ini-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ded0ab57406dd6b25eed7c5ecfac3f5c9075e59f938608e40d47ab3b68cb6e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...