MAL-2025-147273 Malicious code in repository-mdx-init-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1a54f154ee893d7c612bccc459d3b27c420ea729fdc420864cca5b527a96b66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142773 Malicious code in gacrux-nightmare-electron-builder-warp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4014bb2f2419fca4fca93e72a600a6fb2d56786b81f6dde8040e3a24004ef7ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142662 Malicious code in fornax-wezen-celeste-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f48cfa36fc13439057ca8acb57b8ad7788370235a7ca5a7a31780179d367ead This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149312 Malicious code in webdriver-manager-chariklo-aether-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 565f76f2b1e7bfaeedc6b3a660334f8e11e8a8b25d0bc5006c3522ef35a227a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147945 Malicious code in sirius-css-minimizer-webpack-plugin-gulp-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ca1fd93296551c523ea41407b98ea746afe18e970e55e894d1f83b0eaa59303 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145486 Malicious code in nightwatch-shelljs-optimize-css-assets-webpack-plugin-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9188b5e4608aca9ab9241332c97595f1497acd8c7a5c7f5ed46cfc93609c0208 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144319 Malicious code in less-loader-dotenv-parse-variables-ophiuchus-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29a1bbe9db986faf6cdb9d446f73fd84d8df8a0b68709c7614f3344107d666f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145782 Malicious code in octans-transport-parcel-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f861ca8dc68e2483be5dc5e3fdafa633fc9d3dfb50747bd13e6decdf733fff6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143210 Malicious code in heka-ophiuchus-cache-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04a88089822f8c73b5b0395551f87a7a085394fb6497c4c9d5cc2a81edb29f61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146876 Malicious code in pyxis-eclipse-mysql-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83e1ee2fc463e47934604c30abeaa1ca76f73607788e0c7cbf0682047489e488 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140886 Malicious code in comet-prettier-stylelint-sync-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92d5c98db5b7146df7a441581fdd939b2117265622711d8ed278484b18dc0319 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148512 Malicious code in terser-chakra-ui-grunt-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 903a4d37382f2a09f61b6e8a5ac96de1298a22ff49679f7e040bcd366594f34e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143659 Malicious code in inquirer-remark-upgrade-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d8f4bdb1f8f040e33ec40f663df8fe7c86704238205484e4164f4e960b24070 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144850 Malicious code in mensa-fornax-dagda-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1a30f012f70b9c04326a3eb8049c9458b8986a6a78608bd59de0d84977266c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142740 Malicious code in fusion-lint-staged-chromedriver-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73015639cc897932af9ad7c829ddeef34a0feeb617281db2f41443a5061d8516 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141962 Malicious code in element-ui-ceres-aquarius-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e54814dfe23a781cb3e4bd646a7076f4328a131fa2f85effb56c7c81ba91163 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141098 Malicious code in cordelia-cressida-quantum-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27661cfc261a53a02a9701df91b624e832b0af05f032fa459f8ce8ed27561fec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149484 Malicious code in winston-changelog-cygnus-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b60b88130d8ae31195152a9e0bfae2ba8966159706a17f71bd595bec96eee77b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149185 Malicious code in vortex-norma-spawn-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d9871526da17ffbeb1990534998c1ea3e9b0812ae4bbd2867c1b095eabba085 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142344 Malicious code in exec-indus-quark-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaeff126d4d9dae822df5c1ba07200edc2513a45a3299d7100ab54cfe4c4a5ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...