MAL-2025-144884 Malicious code in metalsmith-nashira-antares-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51273149466de9075c0d9303cc4951568f8a57f52465e36cecc60873cea99730 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147509 Malicious code in rollup-plugin-async-shelljs-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd26dff81921adafb42e1a04235e7606401fabfd2575d8186a6e2b9b0acbbe14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143678 Malicious code in install-got-dorado-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87d83786c06b40388453046b11e3e8daaab0a474693577cefbd09193e1f4fd73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142487 Malicious code in firebase-aurora-neptune-writable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92dcc1703b8cb599291ed4ccd67e64ba3a5a6e55d18f59b93369f603cacbbe50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148510 Malicious code in terser-auth-axios-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9ca9de95c4d2f1954696851df6eeb56a9ab45bd6ca6f020331f31b003c67e79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148773 Malicious code in transform-sass-loader-polaris-relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc183012c84bdd3ddd136d2b621899f44ba21be8be6e0b94f9719cf50b67722c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148414 Malicious code in sync-antares-rehype-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41f4046d6c01db6709f2ceda4dfa721a7019ccbdf0f7fdeab32c751a236d0cb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148879 Malicious code in uglify-js-query-rest-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f7ddb9154d6ffab0c9c7227bb580b74dbe26895e4f866fcc6479c477cd2e568 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148025 Malicious code in soap-lacerta-development-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe1538db670cb12b58db8bb5361f14eb3d4c50a6ece5f1794cd06729712a4aa9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140908 Malicious code in command-io-gravity-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b85d428b46a5347f6003a5b341f4bdacf76a07ecde08559de977319a4130e910 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147631 Malicious code in sagitta-xml-child-process-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a994e3d9f806b277e2a6fe89497b8bd8b217966da20b43ec15ace8cfad2690ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147199 Malicious code in relay-cors-callisto-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9749ec9054bca0d033b67273f121b943ff34485eec11b3bab1c3b3fd501e8aaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145872 Malicious code in optimize-css-assets-webpack-plugin-terser-webpack-plugin-rigel-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 138bf8a994a04b7e14d930629ec92d4475e294a85c119a59f15a9bf8ca6145a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148691 Malicious code in titan-polaris-wolf-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9cd593eb7cd0784d0722fc9a9b4d17c974690e19d815b6ecb4f18d1ba7ba392 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139333 Malicious code in alphard-odin-radiant-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 061b018c3c576a12e91b1414b540a920cf4d9a62aa4d6901c07ab7ef1b75bd98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146254 Malicious code in pino-uglify-js-uninstall-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff9e617966f95f14dfc7533b56c77f9f8aead0d58a5ada8990958634402c7bca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144015 Malicious code in juno-antares-flare-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5bdc635e072a475177d4dadf2c9890985c9678f720a2ef69952a4feb3c3dc28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145902 Malicious code in orbit-carpo-stop-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cc73fb28f30595738f9102c7e9d6150fe6f8e4e3776f6c4746ad2042242533f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144949 Malicious code in middleware-blitz-mutation-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5f55a3d1837c6187591f05ff77aecde65c5efc3ddac721b99369b3e052d02a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140642 Malicious code in chalk-hydra-parcel-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 489671468c3b3bbbaed96e23a570df1dd1327928a57ba7af09270775777d457d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...