MAL-2025-148718 Malicious code in toml-nestjs-achernar-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8c78e04b8f2815e1011055a5b9b24b210d0f8b76a156c056807518216aac5be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142746 Malicious code in fusion-restart-koa-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1780b515b5dd9b790fad828a8f9fa7156196bc7166d320a62ce6341d0f4169ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143964 Malicious code in json-blaze-venus-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d51c1c6ec63a3d99da75baa6514564df1e94d76b8d4233dc509033894f4ee415 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141664 Malicious code in docusaurus-eslint-config-telesto-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d6b3b8afa60d7366eb009f4ec27b46798e82d8153856f9a70813f982fee90a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145653 Malicious code in nova-centaurus-telesto-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5bbc66b20d8d504c89d9ccde8e832f98bb379a688b9c04e2ed6dc9641f1d34d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144833 Malicious code in meissa-sirius-mensa-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39685b13c2f35a5acf6ddf1c578e4b18e9c1fd50231940372aed718a32f486ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143411 Malicious code in husky-callback-algol-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1538e4a9f30831e667538f037c38b18a94ec4a408eba6eb228a4f975a9b8613c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144883 Malicious code in metalsmith-mui-less-loader-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10bb6388df2ae8ef88d5d36c437f612beb5e1f332ee1c03c546e1444a4f4f673 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148866 Malicious code in uglify-js-blaze-rocket-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5472177412ba005ec7b22767f42c1542b3f4d4f60fdd02d901c9d4defdd5ab8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149868 Malicious code in zenobia-markdown-pdf-sirius-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc930c5822a7bbf58c6f7f984bf76daf2b51adf0233ea6467e01ce03a493ea1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140152 Malicious code in buffer-betelgeuse-frontend-rehype (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c0ef4b2d71dd1d93e43bc2f987e0a94230df746070093c4bf07678a38085182 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144638 Malicious code in magellan-graphql-levels-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20526f5014eee97ee2e57fd6f52681ed6681877adc4ebeefb396c9d8ff23adea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140117 Malicious code in bootstrap-playwright-levels-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecb9f73fa8fd1876ce64591a40e51714d01023c2754d029bd29814b32c7c621a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141770 Malicious code in dotenv-safe-postcss-loader-taurus-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 311fa8407e3f0b9e342b94b70bbf8b4f70cfd62a93df0c308b3f4b6bc8829b91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148888 Malicious code in ultra-bootes-async-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fd26e69c3e192ded739ff679b22feebc040ce7ee70091e860c1087ad35dd6ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141808 Malicious code in duplex-elara-charon-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 494f2037fcf883fe2bf066df716f3152638b27ffc4349a02c360667bd18cbbf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145446 Malicious code in nightmare-run-script-cosmiconfig-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 224f85680e32fc803514afae57e3a670a44ee9ab4255bf6e374c5326949375d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145051 Malicious code in miranda-promise-odin-rehype (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02962f939958784843b6a0ec0e0006c8a28d63bfb1a39aef4e30c2ef00e89105 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145680 Malicious code in npm-ini-helios-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ce669b34e85d458db538df813a9e40ac3efc5db9a1822aba0115e582777b186 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147115 Malicious code in redis-sqlite-odin-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6508b6ee75945f1d3e5c0620456e69c2562fc5be6e27f8f8e508184d955043ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...