MAL-2025-145391 Malicious code in nestjs-cressida-pegasus-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9b69987b3b711712af2620dc816b97bc32e9d6c0e4bf7a77624e4b559718a31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141269 Malicious code in cross-env-rocket-delphinus-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5c1857507a730cc1bad9936eda3f03cdda32b8b2ecd1b8a2a1fb384113655dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140087 Malicious code in bootes-ophiuchus-phoenix-pyxis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65cd14c888f39abec4719ca970ce1f6297c3c19feece2bd1c5db6e14e12d9028 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144145 Malicious code in kaus-hapi-css-loader-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28e3895c78a71fd2ea5e6ab9db681efe43891f8ab1c3ea3f392a530f981768a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145162 Malicious code in mongoose-pavo-arcturus-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdb3646c653052b4f7657c65572c429be051821f24a9fb82a8bc96c3fff2cd0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143012 Malicious code in graphql-virgo-prettier-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaf0c2ff36e58cc35243ac8e68be82032aa3e1c00c0ac502474a893c01758736 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148625 Malicious code in tethys-non-blocking-hexo-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d885f6678a047d144fa23ca12189e3691db1ed724e104927120acef8a43c47e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148708 Malicious code in toml-cygnus-proxima-jabbah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4194b5c1fe6cf03d68132eb00a7abf5850a2a63b9ef0a9547447561276b22041 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149403 Malicious code in webpack-postgres-draco-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 765202ad2c860e75154b78975f19a9173bd6a6acf4f554a2f5f02825a71f85d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144681 Malicious code in markdown-bunyan-sass-loader-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e75ba6abae34bf7fff5d43af7c07946d458f794e386d3f8dccc26010f8bfd47a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148756 Malicious code in tool-terser-avior-less (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6e7250d997601bf9650f92fb361f0b19215ebb038518c5ff63a958a9eb4dca2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139532 Malicious code in apollo-ursa-tailwindcss-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07c5055c4409c3fb1e231a35760c7bde61d90da1af4606587d4ebb0be38a6c86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149147 Malicious code in version-uglify-js-draco-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a26869fd77a392ca463df0916b836137bfb66b07bbfff340b495ad7e48b566e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145313 Malicious code in nconf-elektra-testcafe-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d45f11da5260377602e2a2dcba65f2ebc42a878b0040f31dd4e4a92f948efa5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141620 Malicious code in development-exec-spawn-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a304c47087ce6235ea11d67ae22402da93443f443c701408982475b773bcb42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140571 Malicious code in ceres-lynx-upgrade-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82af15cc688492a87f753018c2a22b0de6ab6047cda2e5cd8a4d9ea67d74dfd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139437 Malicious code in antares-sagitta-hermes-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bd83427e56df88a4c28b00a435090b1a952c4b1b7a52f9c58f18630af7a3621 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143235 Malicious code in helios-impulse-meteor-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94a30ebdf2d02c41b22077fb82b20683bbaf0a69357bc49bb96ea654f422a445 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149797 Malicious code in yaml-nightmare-command-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22757024aa3a3d10664748a50311b9182e726fc4abcde0b54f43b750cb3c57c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139784 Malicious code in avior-sedna-adonis-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92f6a18b05bbbfb0b1dc6c244b97d5ce8fb073ecd38758720a74adb3d57de635 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...