MAL-2025-149140 Malicious code in version-mdx-development-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d7ea97e441bc8365483bdd5542b8f2597dbb2c78a69fee43619fa2f272459ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145767 Malicious code in octans-cross-env-json-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 980d9c7fa3ca9b291ece46c179901d948eb4dc5790702dbe2e3b7d7ef2e88927 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141132 Malicious code in cors-registry-cross-env-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 097b8707ff937202a007e6ec522d6f0159c12a69f763bba77779bf43607923ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147772 Malicious code in sedna-janus-aether-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ce5f408158a22ae9ab0a73f336c45a653252c9211ad2147a279babe6f3de397 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141972 Malicious code in element-ui-lint-staged-apollo-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7663ec121540f855126afa6ae53b512cdb1548d4a95d3abda120df66dfd982c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144134 Malicious code in kastra-style-loader-scorpius-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 145a70e265be9cbc19dfdf8058afabde0e060e18d1a3622c1b8a0df5620bf0a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145095 Malicious code in mocha-typeorm-regulus-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebb72c95947fa7d58b028dd38afff0fb452892ec02153990107a8ef8ebcb201d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141985 Malicious code in element-ui-venus-avior-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector feeac183e6d94545c4266cef223f857dba6ee25ed0cafd0536c4a56a2021212f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145360 Malicious code in neptune-eris-rollup-plugin-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8f9c685aef5b5b9c0f020ad1b241c7b6dc706cb726fd15aaf95398f50602866 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145340 Malicious code in nebula-duplex-nightwatch-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6412c4f262852e7f97b4bcd32fb6dc1aefd960c6630d40137b33a576d3e4010a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140420 Malicious code in carina-phoebe-materialize-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e51fffb63b35e5c202571729d564d9d00f081b4a074da1e29d847410d5e428a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144557 Malicious code in loopback-mensa-chai-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01362edbbd4889b7fcd0958ff4df6d0c1e3cac1f61f9e9a762c6f9b254f4c359 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139640 Malicious code in atlas-browserify-commitlint-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e1d432cbc38cd2edea7a8feca2f8f380d754cd24a8973d59c7454e1e9453380 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148472 Malicious code in taurus-mdx-promise-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6c325e367241c5e965dea2194667e8e615c49c2186c63d7e8bff622220960ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147448 Malicious code in rimraf-dagda-sass-loader-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22b08cf31ae06b8cfe4006f906ef9b24fd19a4e3179eb3ac12b3d42f4a7e37ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141922 Malicious code in electron-meteor-command-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8725cb8d00cd993a2f9b100963405457a5faaed7d6d3912b00470a91b3120371 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144684 Malicious code in markdown-morgan-aether-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 760c98b04e7959bfeddbd8736fd9449113cf66e31d4730bb3f8b6dba48e44c6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141674 Malicious code in docusaurus-pulsar-update-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c511d5a2ee8f9a523e4d749bd04e47f8df8f083c1a69cb00ce364a7c709c6a31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144819 Malicious code in meissa-ophiuchus-less-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8518a814cafbac1fe3b24bde9c440231a89ec97e3377a71c305e1bb5c795f498 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142553 Malicious code in fomalhaut-spinner-capella-less (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa0e8d1ddde0788381e96ddabfe8341e2ff22da6843eb0046ffd53de5dbc0b31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...