MAL-2025-149168 Malicious code in virgo-rehype-hermes-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b4c4bf9e0a867f395c0915acb3f132a13d802a1a26646349a3019eb4bfc537d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149403 Malicious code in webpack-postgres-draco-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 765202ad2c860e75154b78975f19a9173bd6a6acf4f554a2f5f02825a71f85d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147197 Malicious code in relay-changelog-webdriverio-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b0e59c7d74bb68f1c08f1fee54f8e1295b7afd6445c1ba26ecea6f7b75a3365 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146748 Malicious code in proxima-vortex-buffer-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52486fb9b8c443812e90f249479354ead4215bfd779e8b4540f4a7ff76bf0e6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139242 Malicious code in aether-sqlite-meissa-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29327f59a8318f6abc51bcfd6abe17a7008f1530fcf43b381c55f14e7d32ce27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144414 Malicious code in link-meissa-colors-nightmare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37d8a7b6e669481fa904e09e533347207b654c2c73dafbc0f436908439741150 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149186 Malicious code in vortex-octans-adonis-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4832831988a84233762d969fc55c8a6d390648259d338d79c3a6ae09efd58d61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143737 Malicious code in iota-pegasus-radiant-xenos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2531c5cbdb119ecb6a54a745c27ee948801438590866abeae89bed715462a56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143473 Malicious code in hyperion-express-levels-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90de39791303e3f40652d0174daef89cc814105d6bc42e8c7cdf7d0e96351cd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141533 Malicious code in deneb-betelgeuse-prettier-stylelint-geckodriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f69150f9f33731a4330152efa49e47de700c1bd6c725073e76a1854194a83675 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140917 Malicious code in command-ophiuchus-envconfig-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71777ff20b2261fa16a73576b34d21d19d404c983e8f479a1239d8d15976b869 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147036 Malicious code in rate-limiter-draco-hyperion-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93333596259493e28893358a021b47b9496a3cfdf099f46a04593b50432471ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146532 Malicious code in private-figures-package-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d36fd20fd35342e09fa3fb785bb03a67fb101cb03c22763f8c568c575bd8d81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142694 Malicious code in framework-rigel-xenos-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea682a7772329c2722aec8ab0885f3f2680f15f20afa3d09c05cd2b909698d18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144409 Malicious code in link-gravity-css-loader-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a75f70a93f2d197cb9e483e0fb1bcad8f2a0bcddcb8ff63508f3e3bd5dd087ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139441 Malicious code in antares-spectron-apollo-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcc69a052d9165b987f2a1a60e824aac161b9c771d669f25ae8259267dc1d7e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143155 Malicious code in halley-mensa-prompts-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 855e3f107c149e03bb867dc4f32af1a5ac1d3d7995590bfd0e43e51d71189212 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140449 Malicious code in carpo-mira-restart-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f1338397dbe4e92f39d3c40c186591ae1ad77a9bfd7a198bac2c4fd27af7e98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149873 Malicious code in zenobia-sails-chariklo-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbd4814d994186a5660f22e03e2f758cbfca20ba3b3dd80dd97a01dac7ca3a87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139795 Malicious code in await-css-loader-neptune-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 471b5799bdc0500202c4414d25c7709bc32363daf02d464476cc8a8bb3518ba3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...