MAL-2025-147049 Malicious code in rate-limiter-unuk-less-terser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f48b7e98a995af2a7a375936cb22752167fb03fc6ad0f8b998f41e42e5bf500 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146722 Malicious code in proxima-luna-janus-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3485ed97ed5ee07ccb23c5e647638790ba3d17b125c77e378bdc54f224def390 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140000 Malicious code in betelgeuse-registry-spawn-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4043428c8364873adc4d1b86cc8efeaa27853ac5456f63216930f7c514557f98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140836 Malicious code in cluster-sync-development-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24ded04885cce013370c43c85d9b42e94e798f39aab69a13d49118a8fb5df4d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145940 Malicious code in package-norma-thuban-oberon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87a75ce577389fd332b3db5687497106b3602eb875ddc4098e237e88b7712e99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146019 Malicious code in pegasus-callback-build-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa451bc61732e3800480939f0e2c59aacea12ed0549347ad33424411dbe39b55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147125 Malicious code in registry-europa-antares-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47da6a64a6a0952ceae89b41a52613eafa5aa8d8d0d973dbdffd14faf9b588b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143766 Malicious code in izar-transport-transport-xerxes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 618328e12b0ff637ceb1688683a924234b65fbda44e8fcb3c6a3ad3647166f7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144604 Malicious code in lyra-buffer-sirius-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b52588d74bb90999914f87139a9d767c0c09748794ac5b8677d02a3e90b2a48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143160 Malicious code in halley-pino-pretty-delphinus-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33c4734fe14f854cc4ba56e59672864984edd54b722ce1a7646d86b77e503662 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149480 Malicious code in winston-blaze-convict-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9405a26bbb3c5e2d9aa7aa5ddcb59c8ca86b807d28d65fb2f0a57974e0bc26b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147916 Malicious code in shelljs-install-shelljs-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1465c8c38d5c944afb1ba4dd74f73f3f3bf5ffd4534af869b355d47313c63419 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144300 Malicious code in leda-vega-forever-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 705ba1bffe46a977d02c92d5251392b47fa800e7294432d8f3f44f3f5c584c8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146813 Malicious code in publish-shelljs-hexo-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca528f5126e9c24a6c62f286d8690488cb572f3f41632364e361ae06bedbaaa9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139463 Malicious code in antd-phoebe-puppeteer-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37a146e4fbedce4d4182b6dd893bfe855eb68edfb8e427aef2db8af106af198f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146998 Malicious code in quito-lynx-astro-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffd46b3c1de7c1784a8817620ce930feb00336a3a0fe9bc8c24e890ad623ba1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148200 Malicious code in spinner-jabbah-dotenv-safe-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 748d8a3cff783e8ce4ca144f5365873cb4fe15073ac53fe9fa26f546b053cd6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140949 Malicious code in commitizen-vuepress-slides-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05d3349dbf2aa8e6026d62f70d94138d5d47c305bdbdb57b61d4923f1ccd53d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spinner-meteor-cross-env-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b02a5fd83cd585c97bfba295b68bef6049616cc907ce52122d685ac0a93aa59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in babel-rehype-mini-css-extract-plugin-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a1fc500675fae07b9a876c104374b27b82820a5d8bcfaad02b275aa0426a718 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...