MAL-2025-149033 Malicious code in upgrade-spawn-server-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a6ae84aa5b7fe85307aa839241cc7ad1bc03413134bad3133d229dd5cb63412 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144304 Malicious code in leda-yildun-impulse-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e7b684f94135184bcd5a2f8b650ab023e39020319d3230e7793531aa7f15b5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139782 Malicious code in avior-rimraf-vortex-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9e1632b8b77188e6ede1dbf7a9b7613f23bf5c4efdac1277186ed40c8995ec9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142622 Malicious code in fornax-grunt-zephyr-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5618c03ace1b7982597f2237ad3ce62c1e20dfc2b23419fe11450d9d6f70b7d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147259 Malicious code in repository-canopus-csrf-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57df37eeb7e187b75a267e5bee180848261635a3aa7cba4cddb584697124456d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148188 Malicious code in spinner-commitlint-wezen-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7248b099b94049bc225949d94b135a1b4daaf5102e8fb556c93c3a3b747c13c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144052 Malicious code in jupiter-charon-concurrently-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cb1a4b72f5e7dfbf46d2ec719a3664799804836dcce96db92b44fa905bfbef1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141399 Malicious code in cypress-hexo-publish-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49327fceabc44149bd1524f1da1aed84393c4338514085628a89baa28afdb1e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147365 Malicious code in rest-sagitta-subscription-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76feec4c0ec22af6d32cf9249d74d286f41c8961ed3538c6a0a07fc6c71de1ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140660 Malicious code in chalk-wasat-juno-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbe737cfc109d50d973a0bd7ef6bb85265322f12059957b9931ec6ecca31060d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142033 Malicious code in enceladus-process-sqlite-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd9273611d6fcd1c1d08fe8e868a72e5bb8227c46876500e01a1ec3d3839c7ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148905 Malicious code in ultra-postgres-publish-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a69ef1a05e965d83cfb4cb86ad322a2c76bdc4bcd679eaadd6fb496f43fe92bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148319 Malicious code in stream-impulse-halley-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00f43ed0fe224677a8bd0b3ddeca70ab4093b2d2108e29be6a7fb5bd8c529553 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149245 Malicious code in vulcan-mini-css-extract-plugin-commitlint-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fbac709081533786703a9d2c820cc05cc6e037c57d2336727371303e83624a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149827 Malicious code in yildun-xanadu-bootes-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7a8e9f820d9fdcc7495d8be7342f3bc3b30c703f968aba70bde677cd39a879c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144839 Malicious code in meissa-wolf-server-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 415cc67a74743d56b584974cbe4bdd788fd9b44edea0c49f73e87804b457687f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145446 Malicious code in nightmare-run-script-cosmiconfig-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 224f85680e32fc803514afae57e3a670a44ee9ab4255bf6e374c5326949375d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146886 Malicious code in pyxis-perseus-release-it-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04b04e9c06a4cc4e95b2435dbd3567c0e5ee46522a071221fb8a3640bc33a207 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139836 Malicious code in axios-pm2-xenon-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f28b76aa173fc94a450db97a77c2780c6f360c85dbbcc45aae437320b65d9666 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141613 Malicious code in development-cache-nightwatch-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47ef7e26646978c08aed8419135ce66e36763fd4296013810cb9b553b4a84fe0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...