MAL-2025-145360 Malicious code in neptune-eris-rollup-plugin-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8f9c685aef5b5b9c0f020ad1b241c7b6dc706cb726fd15aaf95398f50602866 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147976 Malicious code in sirius-rollup-despina-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fa05f73f303538e8cd6f0ac16009ddabcf7a71a2bb068c2a2ff4856715ddf4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149117 Malicious code in venus-orbit-husky-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af0539518de3e6cccfcabe6c6b3e4c46ffa3507a82cd794c94d97994c8506e73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139849 Malicious code in babel-cluster-zenith-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f977b338090844b6481ac64a9e37f943917cc5613c463d25d52acc8f6557183 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143400 Malicious code in hugo-semantic-ui-halley-blitz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e5f63115e6ff856da5807899b948f1831d1affb3d4a957e556dda9eb71ac7f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146569 Malicious code in process-selenium-quasar-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9c223c3e8c566dce16e6ff836337eead79651732149440d97da8f0b3531aff7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144460 Malicious code in lint-staged-link-promise-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea094eb5bef67aa642231bfa689b8f67908ebefbd7fb7bb0ab8b13e9c92a4d35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144664 Malicious code in magellan-selenium-webdriver-manager-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbc85defb5c47d81a6b7152dddb64836d50ee11205bac70928844a4534b6d9e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149160 Malicious code in virgo-levels-magellan-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8f439c2f047525b2c03d5156c206513137778e006834e00a3b032afff3ee67e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144134 Malicious code in kastra-style-loader-scorpius-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 145a70e265be9cbc19dfdf8058afabde0e060e18d1a3622c1b8a0df5620bf0a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142117 Malicious code in equinox-centauri-lacerta-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0af7e42dd6ecc2d5e444e441dbe9d246c94856bc0fdf210e3b3ba99c7d462551 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141029 Malicious code in config-lint-staged-backend-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7aa2fd9f0627c17d5d0055e00b56430f9ba1fba381331f5a5942ea674862a810 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140194 Malicious code in build-triton-webpack-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0445dd59b462201888dff87507cca5d90898111de33c352dc7250b9b0426d9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144171 Malicious code in kinetic-exec-spectron-webdriver-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7effbcd1496d9a2517931b273a2bd6b3fe910ed3cc3d39cb648b766711de01d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140431 Malicious code in carpo-barnard-tethys-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b3e6e2cbdfce1f99dac07c16e06635150adaf3cacb4524c51c4c46c8ab07e22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143987 Malicious code in json-ursa-css-loader-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5406ac3e06b5b56b6c13c590d77ae1cdd2708be1a3fda43e1513027790e9b405 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144869 Malicious code in metalsmith-apollo-mongodb-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e399d83891ab0f7901b1564c9369ae8c6e8662adb122c51ed7aeb29938c2526 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140668 Malicious code in changelog-epimetheus-playwright-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f98ec24c5fa750bf9b76460f81fe16dc5ed8f7a8005aae5f8a1a60e5520705c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145959 Malicious code in parcel-gravity-lynx-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a0aed86a0b9aca73d4fc0368b4d3dbb20665ce2b49f73ce2a0cdcd4f93f8a5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145411 Malicious code in nextjs-carina-pino-algol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63b4608a8302d32cd394e18d23f01b225db5954475612fa415ecb6e02f8021d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...