MAL-2025-141367 Malicious code in cygnus-heka-mensa-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42240a0951e6d568b6eb3c3c4ad953f7fbbfc1af556e22fa93ff5531099adbc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140949 Malicious code in commitizen-vuepress-slides-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05d3349dbf2aa8e6026d62f70d94138d5d47c305bdbdb57b61d4923f1ccd53d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146813 Malicious code in publish-shelljs-hexo-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca528f5126e9c24a6c62f286d8690488cb572f3f41632364e361ae06bedbaaa9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149847 Malicious code in zenith-elara-proxima-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c41d9ad00ce10402bcb84d375b9c2b0e19568cae242110fe27e150e1252f2682 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147404 Malicious code in reveal-md-celeste-ariel-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c8470d16e3096896180d1fdec498c433326fb2287ef760464e34c1c84caeef7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145904 Malicious code in orbit-configstore-bellatrix-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84856589e5835a0225179325645e11cec438454e45f4e6c72aa2b05ad6a7d785 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144495 Malicious code in local-registry-vega-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67d6c344890d104e2d2a94b05422b2650f4a863a1a96482482518e7cd26a644d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144906 Malicious code in meteor-cross-env-promise-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fb174c4e59f8d419248b9974b4055adfa5d6c0cb04323bb9ba94eea030294ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149378 Malicious code in webdriverio-nightwatch-sequelize-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 641664710fffd6ee624b0eb48165494b9d88e2bf41886b18ff51285c84b58123 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148580 Malicious code in test-sagitta-development-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10c3ec70cfadd3ba402d121641037ebae16726f0afdba17e4143d9fb794b8635 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140952 Malicious code in commitlint-antares-chariklo-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b721512cc47a4a37613f305324a66d29cc423e0fbfe0d78155a8aa93f41bd14f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143527 Malicious code in ignite-sqlite-celeste-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff4d5abb0301795f75d05de9285062e5acc9ff864947b09c2cb09590507f1030 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149580 Malicious code in writable-supervisor-proxima-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3bca4faabe3a42840c725348c122be30333d6195344c1bb22420ab73b6bea88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146858 Malicious code in puppeteer-pino-ursa-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7515fdbe15c9c7166a923b5aac6268128105b471683c0d39f2fbe2f131160e7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143938 Malicious code in jest-vortex-ini-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f57921d568b97d6d9305b1a5aa660dc2fc975b01045ac78e3fd2e0b5ed3a82d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139599 Malicious code in ariel-ursa-nodemon-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33c8ef633f483964dc26c0274ee176e28dfbf8faf7ca47094bdec593aed66d4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147276 Malicious code in repository-optimize-css-assets-webpack-plugin-comet-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae2b8aaee7f9fe3275d75af04e4b41551c3b458a7c59abf6aaf958977f5d449f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142936 Malicious code in global-got-sirius-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3285fed2c03e48f5a42419a8916f260f6b09004934692c06cfdb19a6d5623e24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149642 Malicious code in xenon-bootes-local-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e1ecdb72de6b1e69ec858424fdc0d8d7ae8020b292dde4fbc821fd802480490 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148602 Malicious code in testcafe-rollup-plugin-corvus-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12fddcde5015e0fe42d0e3748a46c260942439e93f59eb180f802176af209eac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...