MAL-2025-142660 Malicious code in fornax-unuk-element-ui-pyxis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbd97146eb66ddbfec41907b5ad2a7e36812cba94513624732447a3b7656fb77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140660 Malicious code in chalk-wasat-juno-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbe737cfc109d50d973a0bd7ef6bb85265322f12059957b9931ec6ecca31060d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149200 Malicious code in vuepress-rollup-plugin-bootes-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 459bba9d11d9ac0d287ffc425c6ef388ffc1edc035bb30a831d617d5e190d4ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145661 Malicious code in nova-lyra-io-draco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2254c710bf27a87896d8f269b5f70f1471cab7d40e0d7b2a737b816fef155d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142645 Malicious code in fornax-postcss-loader-umbra-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 383f3b0b1391bfd0c00a3d1e37ddbcccfb1df98f150dc0f63769832c19d0e281 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139998 Malicious code in betelgeuse-ora-grunt-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6538caf613979a45bfee277338a82e9115c7231a4aae8aa4bdaf88740c452d85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140170 Malicious code in buffer-readable-geckodriver-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b954e06170c9954928e475e5e6c4b220edc4af31fa80dd5b75c4475ce0c0f9b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143861 Malicious code in jasmine-prettier-stylelint-dependencies-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61f28d3b55edf0f2e8a35cc81f0cc5f431232659438bbd5565040e2cc2dfd17c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145857 Malicious code in optimize-css-assets-webpack-plugin-betelgeuse-commitlint-config-angular-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b89d2ffb05d55a0e18788627ae122ac61c109c866161976ca540df6e5ea69458 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149784 Malicious code in yaml-avior-scorpius-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efb86a3851bd639ddaa9794a64622b643d6b6404755edf45bba75dfa40dc0017 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147371 Malicious code in rest-xml-oberon-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fba8531598d663efbbb7a6d963ddf7302c0641020585c948ea3ce54c934dcd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146571 Malicious code in process-spinner-node-config-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10975cf9d208a454c4ec8cf4c7efbfe081c6fb8ff9695c78c35d806391226c26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147640 Malicious code in sails-configstore-umbriel-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c07c63636c7adf18d4ab98086313fd9f92d35fb37e9ec0982f061391b017a133 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145877 Malicious code in ora-aquarius-typeorm-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9815182d10e31dc1de44581326864a8f0a321e4024f950a7cb6088a783487909 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145654 Malicious code in nova-cli-cosmos-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a6b8ac52d3123426f5132fd67a06e0827677939e3a3e3f9791efae39d16a263 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147478 Malicious code in rocket-rocket-rate-limiter-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41e26082c9b904ba1de4516401a9a993d4862884ee2c98d0d8c7caf5a1f51ca2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146267 Malicious code in pipe-query-puppeteer-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 217327ddb3a81eb68c11448bac7cc579de2bd37f7d5a20bcf44b6411817105e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148622 Malicious code in tethys-jupiter-perseus-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d7745941189aa3f6f32c6d199e43dde9726b502b986958cffb96c4ac1b09a11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144347 Malicious code in less-toml-antares-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36ec4a01bbd1ea8ae2bda0f50aa1dc0ae9f30ad46a23957b7b705766c3a1db90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140561 Malicious code in ceres-dependencies-restart-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84afbb88c014567ce635de5bd2f5f6ef18ad0d1ea7dc744aeab38c3484ada01a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...