MAL-2025-143643 Malicious code in inquirer-cli-spinner-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e42be817e5f64c4fcf3dbf7e0780556cf14e706cc97619487c5d0a41962fb9ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147620 Malicious code in sagitta-spica-acamar-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84bd2e1015252bb719f8837c2ef58e6c0dae1f9260d556bf3048de7b0824529c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144265 Malicious code in leda-dependencies-fomalhaut-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54ae827852ca50c8b8261e018186531b500df684686ce65d1fcc9aac58119916 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144824 Malicious code in meissa-pino-supervisor-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b469ab036f2df2169a72083315b0c33c7cf86cf51ed9219beffc4d2b3e4a8dcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146776 Malicious code in publish-browserify-callback-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c864ab0f3ea20a6a763e34b88d57a3110cef1948b43a3c1c9f9b6cbaebab520c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146657 Malicious code in promise-yaml-scripts-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c973ef3a15b1bc61b7b66e927c987ce656abf86b33d2140128bf4b9518333060 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147793 Malicious code in sedna-sequelize-less-loader-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c21acb639bbf2efdb260ea223c2b12d93b35a5e8077ec424222d65f38559509f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143451 Malicious code in hydra-postcss-heka-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29fd2d7a5c80c5698eeb615aee37f27284e32645ca8a48cf6d96f7e32684f2cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143242 Malicious code in helios-vuetify-deneb-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9018411a1ed02158055570dc48502874efbe84da714416b032412d42a6186f43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140807 Malicious code in cli-passport-iota-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac1c96bbd01bc353cd4d6dd7efc63eb0ebf5878a52296eae35df15e5308f6326 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141293 Malicious code in csrf-postcss-dependencies-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e323392ca38cfedc4da56f983f855457eb4db40ebfc12a16fcb2918fafdef571 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141810 Malicious code in duplex-gridsome-antares-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05ebe8ecc207c1773caf691799f0028ead9f4ce74df00b2bed7ca7bb70dd6e88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145528 Malicious code in node-sass-bellatrix-commitizen-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea8300cf67a6d08ef996a5dd67ad197d2f9e90d878f87659c59f6da61608c421 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140660 Malicious code in chalk-wasat-juno-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbe737cfc109d50d973a0bd7ef6bb85265322f12059957b9931ec6ecca31060d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142074 Malicious code in envconfig-halley-despina-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48934d339f8bef386426802ada777ff1e8a39e39111d761252b18c165fc55ccc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145614 Malicious code in non-blocking-loop-semantic-ui-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d03eaa288cc6f9553d625662d06e4257bf68ba16bb7d2e4880f8521db9e278f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144753 Malicious code in materialize-rocket-standard-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0709cf7247b61cb50046c0d471edd39a3f667382a74aa4aa13b18ee742f99d84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145219 Malicious code in mutation-configstore-fetch-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03369c8d6781994538afa39e60c16a4be39c7d489335f04cbb21563ef6487888 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140352 Malicious code in callisto-spectron-hercules-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fca33da93f9706b4fb0fd6adcd6d5af1ddc5f4907d08d945aef36bb5834e103b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139836 Malicious code in axios-pm2-xenon-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f28b76aa173fc94a450db97a77c2780c6f360c85dbbcc45aae437320b65d9666 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...