MAL-2025-142242 Malicious code in eslint-plugin-spectron-csv-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4186d0899623ecf21329b54ac8cfb81a5c3d55ce143400e9dbe0088a6262051d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144808 Malicious code in meissa-hugo-express-uninstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51f53f1a83e397f83a68c0dfed9dd4061d4d7cc7f2c8481e9a6407b90d2c50a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148419 Malicious code in sync-commitlint-materialize-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8d6947e064d99431656bf3cd47e63c4c90b399ee4ca1923bb8f4d5a0c514454 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147465 Malicious code in rocket-eclipse-stop-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4def9ff97a89fd4b0585a7027ccf43a81f2a3715dbcea1118fc5360345d78d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142780 Malicious code in gacrux-publish-tailwindcss-bootes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85d37f5a3c4214caccf7c82701f651d7efb773236d74e1fff5946573dbc65889 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141771 Malicious code in dotenv-safe-postgres-perseus-draco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 118c548fba36106c65ab5a4047e37654324785d2a7b091b8c04a743d9c47bc8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142453 Malicious code in fetch-process-perseus-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a462cabdf85ac98c2a5a3adc4f4470f53cbaf6d2805974518cbeb4e6bddd628f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145491 Malicious code in nightwatch-triton-chromedriver-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 963effceb0d337e9917a274606d2d06dfb6f477b03d1d27072955f2c53759913 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145087 Malicious code in mocha-luna-mdx-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1634f9f8f23b87d45c52a2986d0a62793f1587cae17fed5dd47dfbaba2950f4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140737 Malicious code in charon-thuban-axios-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a62878091dd31f40a00204cee8df3fe4229ddcdc28f34c23574e6211e92f6ff2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148642 Malicious code in thuban-backend-install-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9bfa35a1d7ac1c7b373c12683d1d6bc0b2b5e312df771dc78ed67d22e8588e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146688 Malicious code in protractor-loglevel-telesto-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a82717f772c19f1967d06fefcd6ef777d6e576dc649381c42dc4cea9fe2dd8c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147433 Malicious code in rigel-lint-orbit-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e38cdb45ce2c006f7a290eeaa9ebd89179a65844456fe247adb34b597f3473af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141985 Malicious code in element-ui-venus-avior-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector feeac183e6d94545c4266cef223f857dba6ee25ed0cafd0536c4a56a2021212f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140803 Malicious code in cli-magellan-farout-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b527d8b5b28588d0d184165346d2df487d983e0a39decd2a1b463d5211ca4e08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140141 Malicious code in browserify-sadr-writable-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06f47a4f4423c22a74e9dc21808416e8e2848da7b569aa21cb9d0bc7e67cecdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147055 Malicious code in react-bootstrap-draco-nuxtjs-charon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 503cfd33203eb61bea2f55c0cc50a030ca1af9d5506549c886acb9edbd9776af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142676 Malicious code in framework-astro-library-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bef35db8d4a04cadcdd6e1d033c10b92183e380161dd5773465e45152621bf70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145159 Malicious code in mongoose-meissa-typeorm-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d207c50c16bf8ae27e0abaf49e3c40acadd72c0f080d7ac1c953c490af5088f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140511 Malicious code in celeste-juno-restart-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e323730ed431ba0402402ddebb72abbf45522ea92c6910ada2bf7ebe2a01509 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...