MAL-2025-146314 Malicious code in pm2-sync-convict-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1330108cc41fc5f8b16b97bd8b44613ea9687f6d108f9fb4aac46e264b7302b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146908 Malicious code in quantum-materialize-sqlite-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0ecdc85046977f03c2dffd2a11621e0afb79893017306e4ee419e68c785d6ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140859 Malicious code in colors-phoenix-eslint-config-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3e2d78552580aeb2d96be7e24039e24b488659a043cf2e9ade9ba758d552722 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141876 Malicious code in elara-google-auth0-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15389f5580c9c15a58a0408109441fdba6487427ec7c99e16aa04252529901d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143514 Malicious code in ignite-halley-jovian-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 641352305dc2f90655fc051c707ae15f10e5b860427930d87e2b807717cc2ec7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149748 Malicious code in xo-electron-builder-passport-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a4258594833b0af81aec1a8b3b0c76e3583e9312af81300ca476bb04013958a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142560 Malicious code in forever-apollo-oauth-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90943887c088c5605934a7f3eb8800f69d5e476dce2f64c9ae90f658706a9516 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144587 Malicious code in luna-umbra-chalk-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e6e8f25fefa4b6969ded389ac1cd313816816b4fca0814c10659984ec3170e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141905 Malicious code in electron-builder-hydra-mensa-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 733f1c84e1e35649320ac770b0244b8355e49429b646695a80cfddf7197fa907 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149781 Malicious code in yakutsk-wasat-astro-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b08c20be557c34929f5df6c7e5cfcceb8b208ffe3d9dfaaf04557cee7aae0a1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140933 Malicious code in commitizen-jekyll-antares-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbc26d4847edeaaac6173481b164fe0df5a90f1bb3a3ba1dda00ef38a4eaa118 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148082 Malicious code in solis-polaris-playwright-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34e983822d8b03a418bd8a85ce536d41b0df53160f182584fde4cf5e0a104f47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143409 Malicious code in hugo-yonder-bellatrix-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1817b74c484497208db98fce995e52eda48f36f1567d9819781496d9d71ec967 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143348 Malicious code in hexo-ora-quark-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ede24e2e082bd4c2dd3b03c782c1472ad70a135650e7ee57998bd9e62f1e531 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146427 Malicious code in postcss-yaml-lynx-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7991fb1fffadbc9283f03779f51fa19d71c12c033f9ba3a11c26f4941dcd670 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149630 Malicious code in xanthus-lint-staged-blaze-cassini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48371502ba6002b8a7801a52efdf30de71ca25226e57ffdc898f8c23115affe0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145449 Malicious code in nightmare-start-iota-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7acdaa494b3ea3a94bef6251589986bbc15dbfefeb3734679f22bf2081462050 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146542 Malicious code in private-semantic-ui-lynx-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55cb72d41d91df53f77987fff3f52958a85e6b1d5444c05279e445ce2e4b1e1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149134 Malicious code in version-firebase-yildun-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 959ec43cd51cc37556f973164ffeb7c974359d75dc1141f1635b2777a1b8a03e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141035 Malicious code in config-promise-weywot-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec8c31de4eaa83af600a570d4fbd1f760af8fac9a73751a0902d639cddafa421 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...