MAL-2025-148788 Malicious code in transport-hyperion-luna-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91d8fb53c07bdf16e476ba8daa966e8df59ab4ef2616d84220af6ed7f102a337 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140526 Malicious code in centauri-cosmos-sirius-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c71aab97e6d0aba3a01915d59bf857fdf784e8ac784530bca1da797ba9123c69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149573 Malicious code in writable-mui-eclipse-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e45366a5bba33878c6502bbbd773eb845366dcc9940e5c867b6093acc04700fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149860 Malicious code in zenith-selenium-library-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79a5397d1d1c661e3a6500425713dc90e749fb26cffa81cbe95d446a18798b1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139549 Malicious code in aquarius-schema-link-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e18593dd2817888bcd25d940235adad8818ee1bc9559a873cac93d9ff7cec227 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146461 Malicious code in prettier-cli-css-minimizer-webpack-plugin-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f372a656fe0832a9443ce6a331a1826c8e5a2415fb49cf2868ea557c790b248b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143414 Malicious code in husky-cross-env-miranda-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d70f7421c90393fb635169f739746d14f59bb6253fc140493f6103980b4d869a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146036 Malicious code in pegasus-impulse-event-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af0977a44abde184dbc3739dce64cfb2eb95d5e7cbccea10e59d54906046b6a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148675 Malicious code in titan-child-process-colors-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47fb75103e307e237f68dba3740fb8ce1abeac8222169c1b09e1b817334b60ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141668 Malicious code in docusaurus-ignite-chalk-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0ac628852778f49428df04f0f333889e78112037446428392da60d03dec11e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142529 Malicious code in flare-hugo-build-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e036e9f3a84c26dc9019a651b721efb1a35c004cb62c5f79bd664aedd3d1c2a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145601 Malicious code in non-blocking-antares-ursa-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdb2148dc77444cd4cc50cca99e1da88863f093d0aa4d08f9225bce88ed681e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139429 Malicious code in antares-pegasus-request-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7470d92331ac50589ccac15bd616bab9fcb1114c68a38f4c861ac672f9c8bf82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146616 Malicious code in procyon-stream-registry-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 681ef514413c1e789bfdffdc7059f185ece03f8909580844f7250a0342b40bf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144727 Malicious code in markdownlint-sedna-flare-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccac0ca5ed4eb95ae4a346b68a35cc0148d39329f500d5a3af31185ae88ed48f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143339 Malicious code in hexo-csrf-slides-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4060512652c1775f10dad8705e2c562273f340ce3d86a7b19b503e23e9b2928f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145585 Malicious code in nodemon-mongoose-middleware-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5ef2a72b6763ee7187ed22b8843e8393a1e99887cac99bf5d7ff89efb0104d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139813 Malicious code in await-vulcan-lyra-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed292ee6936e0ee5a9a91b3777a7aa416b690ccdb583cd9256d7c33814053dd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146212 Malicious code in pino-cosmiconfig-eris-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93dd9d8fc57cb176b04e7b09587a7b5e36c2d4b77c0db76abb41f2fc0bf77da2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145532 Malicious code in node-sass-concurrently-markdown-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cecbf1725b1fe3550e4535c888b84b76843307d046713ddb77493b16889d15e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...