MAL-2025-143023 Malicious code in gravity-dotenv-safe-quark-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b46743d185d3cb8c0ab240e5bd2abf54d2e9eed58e86663014e8e9ec32d58bf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146908 Malicious code in quantum-materialize-sqlite-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0ecdc85046977f03c2dffd2a11621e0afb79893017306e4ee419e68c785d6ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144086 Malicious code in jwt-spectron-global-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd19c70db984d25aa49a8e055559447580b2522c142759cf4f72573777240e58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149266 Malicious code in warp-comet-csrf-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95efdb76a77c45a47564e1fc7a242ae41eeaa72b4429cab3af068e68a2d8772a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145762 Malicious code in octans-axios-node-sass-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7692cbc2f8639f5c959ed7f4b387d90952e4f3c2f0d55aed20eef5917ab13d2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141905 Malicious code in electron-builder-hydra-mensa-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 733f1c84e1e35649320ac770b0244b8355e49429b646695a80cfddf7197fa907 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146455 Malicious code in prettier-await-sedna-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da20979527e65cdb03261ee8581c9c8260077ed1257406601373d8afa2819e75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148672 Malicious code in titan-buffer-sagitta-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8dd25da2ea12c17bfcc8b82c1f080529ed705b80141907868b255187769fd4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141225 Malicious code in cressida-castor-await-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e77705b3475b64f9c2feb49b57d114cb8a2433b79f6491f7a30c291524c61c3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140519 Malicious code in celeste-pavo-sagitta-development (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 843f2c4b1603c2df6ce963cf271709d299c53464b9cb23dc1b53e9310420c00e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149604 Malicious code in xanadu-octans-rest-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b133c07f9f0f4feff669de21e38816ebc2fb81c0079455765ce01e12647c159 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144954 Malicious code in middleware-elektra-webdriver-manager-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91fa4a752b1115950ffa2e6d7e6822d1f9b2148ef8084e6635d365390d004fb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143404 Malicious code in hugo-tethys-mini-css-extract-plugin-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7dbc624650bc0b3834c7a8d66f0048884cd10d0c3ba1da0fb8be592def28e9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145771 Malicious code in octans-hyperion-callback-kaus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a9bce75854fa458672be683b1b833a43e8d11c30a04fad9829b766196694d20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139287 Malicious code in aldebaran-zenobia-package-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6d5bb8a735237ea7373c3f507ac04632de6eb775b54c59acde7690da38a86ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142388 Malicious code in express-non-blocking-radiant-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6331e367c9a2ee4f71e42bdc54cee6f2118be46b3a3fd2235e2fbec1a7d33c0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146231 Malicious code in pino-pretty-comet-apollo-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce0fc55dc02578c07a1ca82888f7559c7f7490d510463dac842eddb8680878a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148869 Malicious code in uglify-js-child-process-meissa-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc65988c6ae687d8f277f021531cebb687422230da74bd8667df9a88f1f64b10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140354 Malicious code in callisto-winston-socketio-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcc61cda68c18f9ee8fdafde47a595f3676d0480aa45bc379dd3acb84c0592d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149242 Malicious code in vulcan-kaus-deimos-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b454f36da9906e57ce0e664d3210736df3659cb3a5ef33e7f05864eb97f2067 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...