MAL-2025-144213 Malicious code in kronos-apollo-changelog-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79df635064750b12fad3f8cd2dad32e8df6e3422782ac162ad599d7e8a5a5c1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140436 Malicious code in carpo-cors-react-bootstrap-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d871110fa02601bd5617e3520de63bfc553c86eda11a0f3a7140b61843da2d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143505 Malicious code in ignite-antares-terser-webpack-plugin-mini-css-extract-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 678314a42cd5410b1e3b55dcfe9468f7b009c2bf1126ee336cfd1b2dbbdc65a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139662 Malicious code in atlas-transform-taurus-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f0909ba4909733d4fac4e56663f46711f68ddc92b68de6f9e53ac2818f36279 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145624 Malicious code in non-blocking-stream-achernar-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa3f0aa00a06877ee792afc87c3c806b77a813807ca4ca6abb7f87513a020c99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144664 Malicious code in magellan-selenium-webdriver-manager-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbc85defb5c47d81a6b7152dddb64836d50ee11205bac70928844a4534b6d9e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143987 Malicious code in json-ursa-css-loader-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5406ac3e06b5b56b6c13c590d77ae1cdd2708be1a3fda43e1513027790e9b405 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143934 Malicious code in jest-slidev-express-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99742a9afa706416250e8233ebcc22cf97b90e33d02d629b60b8e46448a1b395 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148458 Malicious code in taurus-antares-child-process-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fe0fc485095fad750a070495da9a88aa78c72c33bcffa9c5000b8fd69e760da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140668 Malicious code in changelog-epimetheus-playwright-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f98ec24c5fa750bf9b76460f81fe16dc5ed8f7a8005aae5f8a1a60e5520705c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145491 Malicious code in nightwatch-triton-chromedriver-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 963effceb0d337e9917a274606d2d06dfb6f477b03d1d27072955f2c53759913 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144312 Malicious code in less-json-sync-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d7bdf49f9f526990d16fa5fe2b84526a9d322ab85095c3fe1b1c70438820902 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144201 Malicious code in koa-postgres-blaze-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b6cdae761bee4ee4e8ae8294fde8b8c4d62a37e14f8b704bf9fa3dee5d856c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145274 Malicious code in nashira-fetch-cressida-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99f86b96208f69b0e6e8c4f0832ea94f5eb903f45afd4f8c34dccb3a6a079114 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140318 Malicious code in callback-spica-rollup-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f80b7f66ec29b8b7eca48bf57af2c22add91cc10771022df2ec443bf4ba139d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149218 Malicious code in vuetify-polaris-jovian-norma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c833e9ad5840b2bbd0c8b479e1f64df65a6d93f501cfe07138ccf463d05acb7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143821 Malicious code in janus-nightmare-proxima-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bba82a0ab80e814c47883bd351c7391871659175114fddc99946f50b92812b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148786 Malicious code in transport-draco-blaze-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 207ef2ba0846e5d36f057c85c4930563d7d0622d6842a09081f634ce315dd2ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143532 Malicious code in ignite-xenos-uglify-js-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c6b28600d0a5b6fc572d1b0eb6ef55abcfaeae911378facaaa2446d3aafea59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139175 Malicious code in acamar-helios-redis-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4557404033bc3d055e3c2f97b617a069cd6bff099c1ddc4a3a1b79a84dd2591 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...