MAL-2025-148767 Malicious code in transform-lyra-run-script-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bbfac3d27d5e5585da3acb64aa34cfa3abf68b3bb6b10150c197fca788b64a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148692 Malicious code in titan-quantum-unuk-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2442a3f0060056ceb4fb323c6c2eba78b7c4abb16e5826b0c5a13a0f9bd413da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142187 Malicious code in eslint-antd-babel-playwright (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fc0b97c319bc0fab324346fa6235b482369da554c688d9c1557de6fd77eabf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142409 Malicious code in farout-dotenv-parse-variables-umbriel-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77da3ed7725426c466baebf68e9a01db08eaeee9aca690bb9e995b81ac270724 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148161 Malicious code in spica-eris-spica-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b8fc462d3d14f04b10e59cf89cab9fe1da14d121a76001f960b85f460b21562 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147129 Malicious code in registry-gacrux-heka-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da988ac05bed7c870b67b3a2195b3e1313acf9eda1348088471a4806c0f16796 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140077 Malicious code in bootes-docusaurus-europa-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57738b105027f69248fd944434baeaa2ed746a584c2111cbd47f4dfe1303e997 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145960 Malicious code in parcel-impulse-dotenv-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf6f1a2a1a9d838f6166968db292f3595c76fc758cfcc26f5beb1b31df51b951 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141870 Malicious code in elara-css-loader-commitlint-config-angular-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ddf581aa3a71ad64ad07ee9dac8fbb7536fec663b15af82f191f14f16c8fc5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144592 Malicious code in lynx-element-ui-radiant-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb459abc2161076cb69f31b2049920a455adad9b0cc0065929cac806e0f95cb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144885 Malicious code in metalsmith-octans-update-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f4291d1a26c48c6ab0fa71474f7d1d7ba0447d623c90bbc2eeb32dbbb4ef370 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140621 Malicious code in chakra-ui-neptune-eslint-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84c4f096543a30ee5960737681cf9b3aa1939dc04aebef1c0ef66fe0b9706477 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144840 Malicious code in meissa-xerxes-ora-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e90b415bc455b48d6e9b02ca3d4997ad6ac8f6a4a2c73c86c9ade270e737c73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142516 Malicious code in firebase-tailwindcss-pegasus-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c42e3fd037db8f4b91d3aaefec30fd2fbad79523ac2b95a4aaef0bf75c2eb56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140819 Malicious code in cluster-auth0-json-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 772c519c283df8f248742b2b97fa33752794ca5101efa6cf8fc76a445d26e100 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149104 Malicious code in venus-capella-mysql-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b724566a0010f3cb95b99768196fefde7a8dc593773bc28c8c4893b746f47489 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149404 Malicious code in webpack-prettier-stylelint-indus-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d64921929eec39375b7dbf92fa014626fad9648c6b0c294de247a2fb6e2fc88c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147726 Malicious code in scripts-build-ganymede-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dca854d6df3b48be4282c2ab22c37905502a03ba15db1d06cb12e79768d8d2b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139430 Malicious code in antares-perseus-indus-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e171dc30c5618b4fb6ccfc0b3dc6ebf43932d473dddf05dff6be591c1695b8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145580 Malicious code in nodemon-europa-apollo-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73e3a54bccec1d6be67cae423c8ec54f1711bb72830ad7f941d8f6cb8bfcfd5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...