MAL-2025-146424 Malicious code in postcss-vuepress-nestjs-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 089a9bf327ef0f08b1005680b1873ca15774ecd7a823578c1712213ad740d477 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140912 Malicious code in command-meissa-config-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3bf6f8a6ac69fb91ea2deb9bae6b5c130a16569a091709ebaa8a834a03f251b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deimos-hyperion-cressida-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd2d88789abfd0303fda40dc8d67147003b7134923bbaea1c25c73e6fa27a5b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148619 Malicious code in tethys-ganymede-despina-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8890cc6c1247e170c0d72077ac4ec63516a0239c307bf183ca446423abf47f7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140556 Malicious code in centaurus-venus-ophiuchus-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95a7fca40fd1d962d444ebe84a26902a310952fe7cd3247d27a4f0122c3c018b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147763 Malicious code in sedna-despina-pyxis-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d399d73429d9ba27cac764fcba3869ce6e10718127ced0ff53bb89d9614c692 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139502 Malicious code in apollo-cordelia-winston-mongodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56077965070e889a1af0696d7fd2581636da35f3c26330ba76f8a3b70135c568 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144749 Malicious code in materialize-polaris-gatsby-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b887a5fc89ada71a9d049c24c19e61cd6becd23fbfd0974d2bb116ffb64734d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146376 Malicious code in polaris-weywot-ganymede-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 170d3e04ad289a69b3ceb68f5917088fd708a09b8b96f4ab8261e3123b32e2ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142405 Malicious code in farout-cz-conventional-changelog-xerxes-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a3749d15f0ed5daee79bbfa0fe5c0867b99a26caf87494156a93eb26468dd25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144709 Malicious code in markdown-pdf-umbriel-jekyll-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0730c03c2363c79a95bc64d4422f8ac83b7325564d3ae2117f4717d20e8fb31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145879 Malicious code in ora-dotenv-safe-nodemon-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5f5ae1a3c4741db4980aa3500c4358afd09c3b49bde668079c555bd0fe85862 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143478 Malicious code in hyperion-hermes-xerxes-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb79ac3641111993364fd68a5541c4fc3e81faf66fb042b2aa4791d8a1db7eea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141054 Malicious code in configstore-graphql-pm2-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0df4450f2fb42c74059bdf2515b13d9ec227be42735da764c21f0c090c58f9c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143550 Malicious code in impulse-pino-eridanus-release-it (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8168435c54621630cc4dc2b62e83d9bc97325824d39293359dd328c3af275f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146107 Malicious code in perseus-procyon-helmet-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0704d4e192cf4d42193c7b8db4484f4d13f416e37a0dd024afa08df4ee3a6d80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145501 Malicious code in node-config-antares-wasat-mongodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17793dd4545a736114649086e593003aa80ac3a044ccfcefbf148d2d89f9a323 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147548 Malicious code in run-script-mysql-antd-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78a8cb08177bfdfc5f53426d3a37b3e877eeca0311d5ce8380f54bea5583ef55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elektra-zenobia-webdriver-mocha-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 123acbb883945a9247d7d3d21ef8b7f1a1e3cd9362cb574c9125374cd3afeade This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enif-postcss-nestjs-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ec138f7c2f3b7576ed66df5c83a3a39db74781bf2a78466f5371bf22fedfc71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...