MAL-2025-148460 Malicious code in taurus-ariel-zenobia-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15bff887919eed00708f4bd099ec6d4bc2bbaaca712b700c892b5cd91641d159 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143627 Malicious code in init-nestjs-loopback-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf610150045073ae0d0481664a90fa69a332cc012f749af053d58550e00feaef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146303 Malicious code in pm2-loopback-update-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b312fa8a771ce19d92893bc98acffe14f93448254dd749b876ff74d95551eae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148845 Malicious code in typeorm-fornax-centaurus-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f30755572e37c868fe80982adf7e0e1b3a3c84d267e86cf691003fcaaba7c0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145945 Malicious code in package-scorpius-kastra-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13206989ca281bd8486109bca034dcd43687f4928eaf2c88002dbd6dcc613c4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146104 Malicious code in perseus-postcss-loader-janus-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9717f2f2ac452204d81ca2f4247e7b08e40a0486176508635e3a9a8711d883ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140479 Malicious code in cassini-winston-helmet-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5810fffb3265738c79fca34580cfbce263e1c4b04d3691104bfc10e5393c5a52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145342 Malicious code in nebula-electron-relay-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b5fe572a26cb12ea989b18242cbfc51386be972e2424a2d2223b5bbd8d58ef1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149871 Malicious code in zenobia-redis-inquirer-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62577692ad5350d3327022ce9fd34ed152f4a6dc7818c1977c932084039feb75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140397 Malicious code in capella-sails-barnard-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76e1d2cd92ef953315bbcbe9321c6e119ba90c15d656d1d9ba2daa51b3f89d48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147493 Malicious code in rollup-buffer-superagent-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c94961fce5ea04ac8cfdfb74d49339851ca055ba99c0a733abafa399d2879bf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140654 Malicious code in chalk-run-script-prompts-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82ea2258006845312d46ca56f78e72c5ffbae2d7e22d59b5775e81b258d8558c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in solis-forever-framework-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 316e03d2d9b03a42cc0a18edfac946e966f105a3ea8f7dbdab34ec57a72304a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143616 Malicious code in init-carpo-kastra-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c64d1fb27cba87ba646d04d099537d85a8a5c7d5ff55ada320a56a2e70b9798 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140256 Malicious code in bunyan-sirius-nashira-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a80839ae4b1e9d6b67291153829fc2219acb1002afce7fc3726e1d9503d4a5a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146385 Malicious code in postcss-cz-conventional-changelog-nova-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43a47ad08ff76838aba861fc6bd56d941e16c5920f34a1d97c32b77c103ee738 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142862 Malicious code in geckodriver-css-loader-transform-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f64f78d7d77f3e696991adcac5717ada6171d328e0dc9af25c717170d0a10828 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140350 Malicious code in callisto-redis-miranda-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50c808404c1516eceae69b46eb674ec8d4ebd16b9fa71aaa80df85e7aced834f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140034 Malicious code in blaze-uglify-js-schema-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f8d5f1ce6793923e6a5f433e28c137a347dd3e3071b1cfcf658b2ec25fcd7b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140483 Malicious code in castor-cypress-figures-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d75653f62b87ec0e21de68334b11a2163da7ee5b1caee696ad96d9e1d7b81d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...