MAL-2025-141186 Malicious code in cosmiconfig-meteor-draco-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4172ff3a9ecb3394a2c362a7510ce7874c7fc1f9cb335e665212ae60a9707b2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146609 Malicious code in procyon-non-blocking-mongoose-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ea88450080d7164cdf4c38d5dac58f5320ab57cdd25d5d0307da65f884d7ac0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146664 Malicious code in prompts-hercules-markdownlint-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b07b854f4be56a57ab029d933b752ea4abf4a14098042f73d4b571fd40263a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144334 Malicious code in less-loader-terser-umbra-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2e0130e99b103ea34fd14f21dae9f7697b1ec917b81b17040f86befcb6a844b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144282 Malicious code in leda-nodejs-nextjs-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8488e7f3eb1b0a423523519eca85887ecd6c04e408dbec4c05e2e936659200fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147440 Malicious code in rigel-spectron-webdriver-dotenv-commitlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ac6d525170b55a178d5be03793420354ed5b67b0d55cb5e8b560bba82486569 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144087 Malicious code in jwt-telesto-bootstrap-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e8e9921872e0584a4359c709971f101c91881e4b879963244f8b683d3c58d81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142635 Malicious code in fornax-markdown-pdf-fornax-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fca9ac077731eb9c84805cd06e984e703d20cf9bd5b748b27043de947b45ae0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143550 Malicious code in impulse-pino-eridanus-release-it (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8168435c54621630cc4dc2b62e83d9bc97325824d39293359dd328c3af275f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148735 Malicious code in tool-hercules-jwt-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 614867d448239773695e3967c5731da29146f4ef3973888628f479856cd8eb3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148930 Malicious code in umbra-optimize-css-assets-webpack-plugin-radiant-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c3a485ba71bf8141e3c611d37b28d38f948007f335340e0dd9e887ec7be1298 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142898 Malicious code in gemini-grunt-spectron-webdriver-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector becd2eb0f83b8c1e751ec487940539f95186eba20bfebf72fa8634b5c6935a7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141706 Malicious code in dotenv-docusaurus-telesto-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89751071ba446007244038c24eea5172d39c9745d04148d57bfdb9056109679a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146973 Malicious code in query-morgan-thuban-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ebe6c980c00fa33efff3d178e6e90aadb55e1737e9f3429f9ee185c7f6fc816 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140458 Malicious code in cassini-barnard-postcss-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14fc0eae501a3f44188f97c182da0c64a77f5f9ad59719e31d2d186c2364e9aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143677 Malicious code in install-europa-arcturus-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 460116a7af8d018d7cca4b78507f895591676bf5b74ba586313c06e4e5d2999f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148671 Malicious code in titan-auth-websockets-algol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 433a1f1238fa18babfb7cdb34edd93e4b23abddb489dead658c27f8f3aec0a08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147548 Malicious code in run-script-mysql-antd-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78a8cb08177bfdfc5f53426d3a37b3e877eeca0311d5ce8380f54bea5583ef55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144261 Malicious code in leda-command-superagent-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a5daf77caa0e93e143e89450b26ceedf166d8ab60bfeb1be48002f019ced103 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139760 Malicious code in auth0-weywot-colors-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0e1f7c60078fb2d8a3ef10f4483e5e439154af97889ce5c796f389b35d42c11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...