MAL-2025-148237 Malicious code in sqlite-release-it-markdown-pdf-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e842ed031476eaff919d2d36c6140df2eafe2aeee5855db59ed82f3128eebfad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148343 Malicious code in style-loader-start-cressida-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06ca4703dc3febe62df4f9224f16a6175999979d6c1e4ff155e28b2a5b32e3b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149388 Malicious code in webpack-apollo-remark-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 421ceeabb85389e3b45f969cde72ca79241252f1cf6315d2f730f5367e54ce8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147405 Malicious code in reveal-md-elara-algol-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fd5b0453b013f59be9fa1f4de877ba3900d709b9cc706e7089493988f189d8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148899 Malicious code in ultra-init-spectron-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fad226bbd37d46411f9e7995bd9f5fe514fe041d07fd02d014234018cf2df8fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139300 Malicious code in algol-markdown-halley-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7abec0a1e0d1bd6e1a3f5a47c0ff1c8105d1d1f3a957783903b664a226c7ac3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146285 Malicious code in playwright-pipe-jwt-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 755d00753640e4a895e2f9616e2566192bce7cf934e38df290ee1c614da63837 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vuetify-dotenv-safe-spectron-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e72b52b005ac79b24237f34f7b4a002e4d2e110209c57ab77354a8a1dc6aaf4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149850 Malicious code in zenith-fornax-nodemon-blitz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c233eed913a5955494e36e35b177d30b7e2e149fb6783776be8bba88cdb4ceed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143243 Malicious code in helios-xml-restart-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d63dc75a03aa2141802b7321311b220cc5902d8579b24371b901d0696be92c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148591 Malicious code in testcafe-css-loader-uglify-js-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b040a662f7e8b05e1b6d1cf3784fc142e5ab38537763c5ba7fe1b304a1f7eaaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148901 Malicious code in ultra-nightwatch-commitizen-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c5ba7ef101351f596629e0364d0b2222171328d574d9ce623ad8780380fb406 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141221 Malicious code in cosmos-soap-pegasus-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36e0dc7491a58e1be275d2856f6b7447f9101ecf9d629c8ae2f6cd4f243f0444 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140091 Malicious code in bootes-sagitta-sync-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dabe567e2577ba63382ca72deebc073ffa5a371f353d2b9acd08110c967f6d87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142257 Malicious code in europa-atlas-despina-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5a7d6efd6baeb724020db9807fe266b2a6de8f0b3a65477fcf5f4ec343b8eca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147672 Malicious code in sass-loader-lacerta-axios-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ff96bb432e59f1814f6243a71d0cfdb66f94102ef9409c18ddc27145e2d95e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147389 Malicious code in restart-procyon-apollo-playwright (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f42e3571477042a427ea800803cc8cce7743f22a2f72d8c43432ac8fd4a5c96c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147092 Malicious code in readable-sqlite-lint-staged-ora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d1e86395f72b0d1c4ca3d9c82e00d107b76b89cc287e27a646f1d01fa40c79a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in convict-hercules-comet-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5786dc2bd60bfdccbe5e268b683b5b9c3f489b85c479fa537c5154dedf4949d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jabbah-miranda-standard-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3de1c22804477b569f6ef1f159cc4a5c33f043f873b677ccce8ce63cff938a14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...