MAL-2025-147732 Malicious code in scripts-foundation-resolvers-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c9bbce27bec68a8aea224727202223aabb0cbbb29433c1d00dc58f3a48262bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143966 Malicious code in json-bootes-spectron-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7949f422a2eb79d0a9a327fd513f7cdfae04ff228a725a80fa6221a919d05cc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147462 Malicious code in rocket-astro-cli-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c472ed77c736a9963eff49b3598afb091fc41500d7bc9f3cbff19ef5c0966701 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143766 Malicious code in izar-transport-transport-xerxes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 618328e12b0ff637ceb1688683a924234b65fbda44e8fcb3c6a3ad3647166f7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146035 Malicious code in pegasus-hydra-mdx-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dfb3dfe3a7ba5ef9dbb20510b6926257b01de2cf51e821c2735d90a0138460b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144954 Malicious code in middleware-elektra-webdriver-manager-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91fa4a752b1115950ffa2e6d7e6822d1f9b2148ef8084e6635d365390d004fb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145506 Malicious code in node-config-envconfig-eleventy-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f7fcd4d199c4e31a475d77993c12ef51ad0d4f90da9d3faeb732173361570c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144534 Malicious code in loop-scripts-koa-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b8bd7851dd59a18465c76cea03c8ddae5cbf1b88a7a03c3e87200dc9451156a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148094 Malicious code in spawn-chai-ursa-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 603a1063a78f7e38fe4f0f14980576141ab4a2b8b61770ff4e99fb73146f6944 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146659 Malicious code in prompts-andromeda-dynamo-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80fafa957c409431d7baec947f5b7a52ca014b0b98bea2e7699e82dca0be314a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149684 Malicious code in xenos-magellan-callback-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8bf51ef45ec0700ded4e3016233d1505c657e69a98f407700b41894c37d3d34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139795 Malicious code in await-css-loader-neptune-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 471b5799bdc0500202c4414d25c7709bc32363daf02d464476cc8a8bb3518ba3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149683 Malicious code in xenos-link-spectron-webdriver-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25d936bd89ea3139311a716abf71d65c328f400082c13300bfcb336b946e2976 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139182 Malicious code in acamar-perseus-leda-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02c01d851b7518dc08365875d2faf898162379eab5f57f890791a44de7fab39b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140560 Malicious code in ceres-cressida-lacerta-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5782a627057146e68a55be11e14e87622c4c6bd1c1a888751f2495c2f61a78cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148704 Malicious code in toml-commitizen-mocha-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a3c9f78b8c8242cee364e3e2ea4760f0e8414e5fe097e2a049ec4986f542423 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146108 Malicious code in perseus-procyon-hugo-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87cbc891ef57a039f013ea6cf1f8543491dfaf10476bd98ffc8f915a00739772 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148043 Malicious code in socketio-acamar-pino-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31f52eb5feb86456ab516fbdf3dda48667262ff5ea6e7f05e4fa7fb2ecace47c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144308 Malicious code in less-cors-bootstrap-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a625b4f86ac38833ce2bcd8b9b3317525645addade1fd9703904c39a78828bd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149650 Malicious code in xenon-mensa-test-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 734533733cb93e6d7ba24767567df55e07992b9ccf15111dc99a7dd30db9cc6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...