MAL-2025-142023 Malicious code in enceladus-betelgeuse-nodejs-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a214e3efeb5ab890583b8fbdd9950fe8de1f2f78df13e65aaaa8892a71e73dc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146263 Malicious code in pipe-jabbah-prettier-stylelint-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15c51329d43e43655bbdb59a03c24e3aa44dff574c959f7d88755860d0c77f3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148314 Malicious code in stream-dynamo-sass-loader-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c12dd3905e769ddc09355e980f8010691eb0e3d6ca5c551d5e33d582b98791d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143840 Malicious code in janus-webdriver-manager-promise-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c1d8c34aca7485379061d221d2cf2eb91ed7e807af9137a758ed65d979477a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146566 Malicious code in process-rehype-gatsby-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0780d7012eb1afbde0ac9c67aee135245e3ebfca73d5a8a0d167e0dd47bc747e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141989 Malicious code in eleventy-aether-package-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b35202d4e67fc27cc38dae4b8a48e505bae3cefd543cacc2a79d667c7cf47751 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141086 Malicious code in convict-query-nodejs-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 947879ab9208e82054fd505807da031763a35a0ff420bdf7e46e98c33eec225d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147459 Malicious code in rimraf-sync-koa-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 532009f657580cbf19bdbec5522f5677ade66238901cab4f4b3a95a524b4dd7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145184 Malicious code in morgan-nightwatch-webpack-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53cf587f269ecc7f2f66a9d49757f109a9d5f079dc24163522e53da40953e73b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140849 Malicious code in colors-element-ui-dagda-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5809245058bb39895586137d945c96906e0075bc1f91d6b1fe5d8eb799fc0899 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142993 Malicious code in got-ursa-css-minimizer-webpack-plugin-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5efd654fe96c6a67d87c933eca18ad2b34cf456480a67150d1a51d0b71d116c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146672 Malicious code in prompts-ophiuchus-indus-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3d007e985a3247da7668e6a5323b5a2600c9ea75aa3ab5f68e692cace8f43da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140737 Malicious code in charon-thuban-axios-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a62878091dd31f40a00204cee8df3fe4229ddcdc28f34c23574e6211e92f6ff2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in regulus-local-eslint-config-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05b8a0e9039e0451fe1b3b0c8b6f33d25e4987340fefcd91e843027f99b848fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140390 Malicious code in capella-kaus-global-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 699839cc245a757edbe4e1980aff3716ed5cbb4f51e2786662d90515c8014ead This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148275 Malicious code in start-lint-staged-antares-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65ca9dec5af3f6986b7abaf03d78477121b87d0e5875637fd40a490404dd5368 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149809 Malicious code in yildun-command-chai-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdd633c6313d4b9c28b2101444cb08386db672459f194e7ba9bcd01f32efb480 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140690 Malicious code in changelog-upgrade-native-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d985c3ae2349fb80095178ca8c1c3d0e0171ce3f14382f0bb8265bbfd705918e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141257 Malicious code in cross-env-hydra-vega-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e75583628fc05638cf1ada99aca1c3b242199b18927ffd6aaa09110231c3784 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147056 Malicious code in react-bootstrap-element-ui-gatsby-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4175fec53eb9ea162464df2522513155eda1ce993052c64a2b283b5cdabf86a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...