MAL-2025-145137 Malicious code in mongodb-prettier-stylelint-warp-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5b98d60581def47fbffb1f138672c4f5589cbd194e37757ea4734716c294b92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148834 Malicious code in triton-xml-ganymede-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12c77b434f8e70b60ed9b41c1eb361d6c28e453ad16bb1bdee7d41360d322ee0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144977 Malicious code in mini-css-extract-plugin-koa-chromedriver-playwright (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32e3f7240ef57a19ea49cf786e8efb14f2c281c3f4efbe67cc4d3d2fde40fc6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145365 Malicious code in neptune-kaus-xanthus-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fed4bc4106be635c7d21bb98b4b77053a3e5766f1ebd1ecbddac9415f6f11f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139523 Malicious code in apollo-non-blocking-local-csrf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 219dba9aaf9a81b49e9c15c99ed9480e9146ffc8e9759ebfa7376db6a1c7b1f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148956 Malicious code in uninstall-figures-epimetheus-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d115db11723ac4106b180606d5b74d562213fec0a4d74dab35dcb1e712c776cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141277 Malicious code in cross-env-yaml-meteor-aurora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20d215441ec813faf80ea353ec77a212352b199912065942b6bb274f8b4c5103 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147177 Malicious code in rehype-neptune-buffer-cassini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c99f96519afc0372b2dea505b8c770086ade6f53b8d09c6710009b159b9c71f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146946 Malicious code in quasar-eclipse-galaxy-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d23d9f2b905a0b12880563e366d80c6088afa0506b9dc9e175e8c0c5ef18b454 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146725 Malicious code in proxima-norma-quantum-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 070c510d6aabd42a9359f70a061481de692e33fe124a1af5ee60137ae925f95b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145169 Malicious code in morgan-betelgeuse-development-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7c6ebe0ee827c2d126604866067870608eb7f03b08baf839fe133540efba06d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141278 Malicious code in cross-env-zenith-dotenv-safe-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c706bc6f96881376f528379502aa33a8a6d66dfcac8b158a6a76b4407eab669 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145000 Malicious code in mira-altair-markdownlint-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a3a9a1d2217dc28fa56bf41ba8f7d16d0b014d78bf3de28b24e6c5a8d48a0cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148331 Malicious code in style-loader-metalsmith-jasmine-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3712922d77edf473092825a863d9355a77327462c5c6f5f3b17df4efe98155b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147199 Malicious code in relay-cors-callisto-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9749ec9054bca0d033b67273f121b943ff34485eec11b3bab1c3b3fd501e8aaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147951 Malicious code in sirius-fornax-process-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad18cca3b1bc8f7e73a9387d862aa3db2328ae3d33cad98bab4d1abcc726e699 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143952 Malicious code in jovian-mira-blaze-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d7a31a0701b775544671d1d8f873a6e0cfd3eac66a6004ec3924bbdd70f5eca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142445 Malicious code in fetch-hexo-commitlint-config-angular-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1275904ccd7fcedcc0f0e16254ee142d90c79cc0ba947d02fe8bfe251f8ffa55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142483 Malicious code in figures-spica-halley-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 161b803565d9a0152ff60b29160803c2711840c6794f148fa262660e872d602c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143394 Malicious code in hugo-neptune-bootstrap-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1e340bca43806e3ebb4c66739277569a7a1a25ce055e7749bdf553b2771554b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...