MAL-2025-145104 Malicious code in module-frontend-toml-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf77bba0885f150e6e4f84b84c43c446109c22577967bb4298dd8ba4cb9186b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145152 Malicious code in mongoose-firebase-local-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ceadc074463bf36701cd49c234869395b1d563165730f2883014fd0532340a24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148458 Malicious code in taurus-antares-child-process-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fe0fc485095fad750a070495da9a88aa78c72c33bcffa9c5000b8fd69e760da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141985 Malicious code in element-ui-venus-avior-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector feeac183e6d94545c4266cef223f857dba6ee25ed0cafd0536c4a56a2021212f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145821 Malicious code in ophiuchus-izar-kastra-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 328a62d2bcdce3b83d55aaaba84a4dc4cdaf49d7d16d020310bc18f9c6672de5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139342 Malicious code in alphard-test-dactyl-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dac07eed232bd602bb75c1b252ee185d4d14cbfb07298839ba8056d35a032c7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142726 Malicious code in fusion-callback-soap-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5f7eb96f887f38576869f47cae2da7442b823c576a30daec11038ac9b362dc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143821 Malicious code in janus-nightmare-proxima-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bba82a0ab80e814c47883bd351c7391871659175114fddc99946f50b92812b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139189 Malicious code in acamar-update-postgres-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fb4db31769e06077155f89e26bad96142790087e079fa0db3fef030b6085eb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143934 Malicious code in jest-slidev-express-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99742a9afa706416250e8233ebcc22cf97b90e33d02d629b60b8e46448a1b395 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149527 Malicious code in winston-sirius-lynx-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc3250323d484e817f69507a804d6b0379ef2de404ac143263edc581d1201620 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149220 Malicious code in vuetify-protractor-dagda-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b637e3a96a8fe046e69b6725f7e6c57b244ed0b4bf061c54739495dabf5ee66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enif-middleware-bellatrix-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9127fd7d76d0f3c78514f671964e2d7fb10b763951b5f7d131a4c1811348a583 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144557 Malicious code in loopback-mensa-chai-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01362edbbd4889b7fcd0958ff4df6d0c1e3cac1f61f9e9a762c6f9b254f4c359 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144668 Malicious code in magellan-testcafe-jest-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3276d8f4b2f01340c5b8606f4b0a0722893d000c715fa38528e4c621543d9f12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141052 Malicious code in configstore-fusion-mensa-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7480df2dc25d9a8f8ba0219587f72f5d1ac90ff210e0c0459f96e3fbbebb3052 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147523 Malicious code in rollup-plugin-ultra-ganymede-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69d84fda97f34b6e4d7fe644721804df274f83af37ded2fbe3c78cb14d629540 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139640 Malicious code in atlas-browserify-commitlint-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e1d432cbc38cd2edea7a8feca2f8f380d754cd24a8973d59c7454e1e9453380 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143607 Malicious code in ini-sirius-ursa-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c66192a4c2d85e47773b11e7fb2e2aa20818e70a0701268640be7ec5ad95c09e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141308 Malicious code in css-loader-metalsmith-reveal-md-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 758f19ad3942aa64e870b1cda93f1d3230e067423845a5b4c5d84fbd34acaa64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...