MAL-2025-143113 Malicious code in gulp-celeste-celeste-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bc22f76f8f70729c7e054321492c0f31c542d27f0daf0305af86a95cc709877 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140397 Malicious code in capella-sails-barnard-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76e1d2cd92ef953315bbcbe9321c6e119ba90c15d656d1d9ba2daa51b3f89d48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139831 Malicious code in axios-javascript-miranda-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f51a91843912d9a042988b80cf5c9feb3a9a0654f7bfcf8ac595a001837f93a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148985 Malicious code in unuk-schema-cross-env-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a284a163b533011f80b6796a04ffc656782019c6c3bff8d63b9b8bf081c1baa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147301 Malicious code in request-magellan-nashira-jsonp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb038937d8f4ebb3e7b9922687f8503ee4277c16c3b7389a6dd6a4e4770f21c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145161 Malicious code in mongoose-nextjs-tailwindcss-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df5baef566e823735372d309ad6675fcc3d0de68e618834cdc3931e40cf8d36b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143457 Malicious code in hydra-socketio-fornax-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9e4cfe4008f63bb69f79d8d2d28349e6ac22e9722c9a52f41d03bddbcb3ffb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144555 Malicious code in loopback-kastra-soap-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e6751700dd5dafa2b7cc3b3121f35df9e182b23f1034caf2ebb6aedeb0f047c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140034 Malicious code in blaze-uglify-js-schema-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f8d5f1ce6793923e6a5f433e28c137a347dd3e3071b1cfcf658b2ec25fcd7b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148264 Malicious code in start-barnard-bellatrix-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aca1529eb0cb56a1c63d39df7055256a40cc90641a5729e731162c15c16e0534 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146972 Malicious code in query-middleware-promise-development (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 044b110d5059a083b5f257a7ddf21a013cab764059814d3d97445da282705cc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140357 Malicious code in canopus-ceres-start-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed6cf436c849d3590009c01fd3be1f2292f845175f0191375f358643d24f99d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147493 Malicious code in rollup-buffer-superagent-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c94961fce5ea04ac8cfdfb74d49339851ca055ba99c0a733abafa399d2879bf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147394 Malicious code in restart-quark-fusion-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1c631713ec6fefd9d7cdb0891872d6a826be32ad71a4c25f3a8e2c3d9b5221d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140256 Malicious code in bunyan-sirius-nashira-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a80839ae4b1e9d6b67291153829fc2219acb1002afce7fc3726e1d9503d4a5a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149278 Malicious code in wasat-acamar-fork-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7e19bafd009a01b2b23ed912abd7ac1dbcdbbf45e8f3b3d1f2df9375ec17703 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148529 Malicious code in terser-meissa-kaus-aurora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eca9100d0d234f4e9de5100fe27255c387d9e90e576451cc687932b4771b9a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147097 Malicious code in redis-despina-process-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d131c3638f6345ec221581b8ce4a623ecfb2824063cc59024b84fe71b0cd0540 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149207 Malicious code in vuetify-dotenv-safe-spectron-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e72b52b005ac79b24237f34f7b4a002e4d2e110209c57ab77354a8a1dc6aaf4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142598 Malicious code in fork-semantic-ui-version-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 372c76cc70f8da88e2d298a38b2447c9e13d94d109ceff0367639fab6769f174 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...