MAL-2025-147569 Malicious code in sadr-oauth-less-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cd41cc24e26ec4db071c81f950a8b2f7fbb929edaceed842b3a51ef8fdfed23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146706 Malicious code in proxima-auriga-luna-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fc49a5534846ee216e1649c7299a0fb3a5fa939dbe2741ab3b04cb4e71e15b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139463 Malicious code in antd-phoebe-puppeteer-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37a146e4fbedce4d4182b6dd893bfe855eb68edfb8e427aef2db8af106af198f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142402 Malicious code in farout-chariklo-jasmine-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3afe9386e40599cb48ff675289b6a309d488a323951b6c444ce1455dcfa503d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146000 Malicious code in pavo-less-loader-convict-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99bd14deccdda00ebe2d12bd079dde2bd5bbe69e9bb4335c43239ee0a5abf57e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141535 Malicious code in deneb-callback-terser-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 125befea8f472118838c92df441d309fd7c4676366f5a833ccedcb1cba6dd12b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142944 Malicious code in global-norma-toml-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ebd506c20629a6f6c2b40cc07276461e3e5b8f00c69196c8ec653bf731e927c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143637 Malicious code in init-yildun-proxima-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8e58e2ececc108f9c03ee9a1ddd205280467095f54af32d75cb204011dcb430 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140949 Malicious code in commitizen-vuepress-slides-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05d3349dbf2aa8e6026d62f70d94138d5d47c305bdbdb57b61d4923f1ccd53d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140486 Malicious code in castor-kronos-jwt-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e97d020770a1734a20c2d706ef8eb38191d7b2a3d741f236a106d400b646af8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139431 Malicious code in antares-phenomic-process-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a73308f60ba615f3627d57d87db5205c9f4eba95159507cd9f0fe02e687f95a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142492 Malicious code in firebase-cressida-commitlint-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46504f4252ff87ca260f5be757ce7ecaa3594bf829bd535705879fe64ba14f4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146591 Malicious code in procyon-envconfig-readable-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6697fea7d29b65951aa52d6a9e51701f0dd3f5832e77e69d3997f6e525d28ed5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142052 Malicious code in enif-less-procyon-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 959dbaf3cd4c9e9429acd747e88f46236bc6f84b85bbd2f3e3c72d8325c55465 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139409 Malicious code in antares-forever-eleventy-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1176b13fe05a33c670c5065abbc172457e68eabe3127f0c4345eb74dfe4db208 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148618 Malicious code in tethys-fusion-wezen-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e832e31bf8f65236d9fb28ab0c595c876adf2c2de15de8445becee2f77a35ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139765 Malicious code in avior-dependencies-radiant-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a39db691166389af7eb41e33b34e652b4a60d102ea2c9b17977299e7f021f730 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142306 Malicious code in event-backend-bellatrix-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb5595b1d4ec3c6ec493010da0a65ce1110cccaa8064745ea9cb362a6791bd2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143379 Malicious code in html-webpack-plugin-zenobia-terser-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca51464dd3dc05ef441fabbd75b7b9aa7b4e463d2f9acd39a1e2772ea9bb8995 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146891 Malicious code in pyxis-thuban-configstore-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c313ddd34e28e09d2c6edd5fd809ad33e9dc86d5583a6b1a050c1f208727106 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...