MAL-2025-146244 Malicious code in pino-pretty-sirius-query-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c73b7c75b3e6d45e3910318ed625d09bfd01135b8bceedac98a8b4dc0c0101e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147744 Malicious code in scripts-quantum-andromeda-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92dd57197959c002bb3f2c34384d0d603abb5da34acfe5db2fadf10e630b6ca2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141010 Malicious code in concurrently-ophiuchus-cordelia-algol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3e47618e5d0ca1380ac6b5315c5c9c7f14e7db876525828a16091163fa78518 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149505 Malicious code in winston-link-sedna-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f85cafa20aa12c12ac18d6450f990058652fe350caf2047392be8836ab59383 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143265 Malicious code in helmet-taurus-json-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fa8f878080b3f1d618d77198ffe1d437ac4e94d3ba1fcd544bb172f8ea9a1ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141161 Malicious code in corvus-node-sass-delphinus-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 469e07d52d72f16f42c33f9ef67076d631925b73721e56baed5037c0dc411074 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142983 Malicious code in got-quark-charon-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2791fdb726654cfab79699ec9ea9331cf5f86011d5e2d08bda7ac54d9a50486 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144726 Malicious code in markdownlint-procyon-magellan-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3737458ecbcf5f4a72d484af71c52ba0eee6232f96af3f035d50de5dddbca906 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149575 Malicious code in writable-neptune-figures-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45124e351e80cd78250efde43533e5978c66164c5a2b54f3aec853be1434693b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147232 Malicious code in release-it-quantum-delphinus-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e68fc559ed11c01b8503c338131487afe6830e3c1af8279dee6f84371826125 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139365 Malicious code in altair-sails-izar-warp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afe12116a5a42b21c1503042a0ee999073c715b3155d77fbd19d739f3d29e19e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gridsome-css-minimizer-webpack-plugin-graphql-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae26c88c181d9c55babee3d7420ebd9761f1cc23f179a381d9b81d8f747c8c1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in castor-reveal-md-react-bootstrap-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 279aa0e60f46495584e2044891a57e17d52a3fa040efc26a9c9574b20e260df5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dependencies-venus-install-bootes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2229483646722536d85ff104226a170ef6e531b8eeef988858eb5722a8adb0fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jest-wezen-corvus-nuxtjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 760766f5a0d8b69d4b0a41207556460ffde2e2318ce46dab3cbaaac001a085ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in public-oberon-tailwindcss-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0c4502aa3cf663ce3032721cb96acea46b65f80e204337edf55f20827f6328e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in csrf-izar-resolvers-nightmare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a98268bc4d6827717267c3f7cb7dcdb135f6828102d3a638c513591381dff15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in non-blocking-stream-achernar-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa3f0aa00a06877ee792afc87c3c806b77a813807ca4ca6abb7f87513a020c99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-plugin-transform-semantic-ui-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43b1046da97d6e7c83170cac3d306570016cd8e3b7315de173d686eb7a2bd2e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scripts-quantum-andromeda-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92dd57197959c002bb3f2c34384d0d603abb5da34acfe5db2fadf10e630b6ca2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...