MAL-2025-146645 Malicious code in promise-nuxtjs-umbra-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d6747916a43b67afac536aee936f618012365ded1a68c4b06f03465d4eca2da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147196 Malicious code in relay-auth0-taurus-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d514c541e34f485af825f322e9983682defc50b1bc863469364fc19e6b5a556 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149042 Malicious code in ursa-apollo-xenon-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edbb8ecb72415ce0c0623a1d88fab94233dda638e82c410ab6280b3fd621c2fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144261 Malicious code in leda-command-superagent-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a5daf77caa0e93e143e89450b26ceedf166d8ab60bfeb1be48002f019ced103 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140025 Malicious code in blaze-lacerta-semantic-ui-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2a663bd504b92f9c6b5898ccaab92e415af2335a8bf3ce22e06e7b89eaff5c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142127 Malicious code in equinox-miranda-achernar-xo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26c8de5522a4e10c92463701c201ae813abede03a36430c363f3d3a3e580f9db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143010 Malicious code in graphql-transport-umbriel-mini-css-extract-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1bb8670d8ed0f388f28b5c9a8c799311b88f450a89ecdaf4c938060e8c2d37b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141337 Malicious code in css-minimizer-webpack-plugin-winston-jwt-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 060b575529075e328bff1c8bb906ea7952c1952b5ee9251977bae0c8fdf4f543 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141303 Malicious code in css-loader-gatsby-oberon-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d8a19af4e44ee7bff5a71b4d40822481fb8ccc14538ae978842ec212c121d58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141218 Malicious code in cosmos-rest-commitlint-config-angular-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a5f62624d7af56b3ad9391610058a9c8347af8babae64bee75e0cb6963cf960 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147109 Malicious code in redis-magellan-hexo-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11d306ee87ba5effd1c09c4499374cc41c683e9287de16007dbd8653665a3c89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144579 Malicious code in luna-query-hyperion-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6142e23ee5ab164fc5622f93b19756207d75ddf3f601955b5f9f00d999c2c42d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142769 Malicious code in gacrux-halley-sagitta-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d580f674707bf205efe8c26f14ef04b8b01cb8a5559944bdecf85e74c6eae29e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140683 Malicious code in changelog-scripts-avior-relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca5b4797f2b0952deabea1bdbb5fa58d322ca777e4ba13455c2c1d2d3b9bc154 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146679 Malicious code in protractor-ceres-pipe-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e1f5d475d87b9be1e9b5b9319d5a267f7c1d579104ea2bbd5c75147f6239988 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147331 Malicious code in resolvers-luna-cassini-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bff5db309fc66bdcbce4dd897c9cf87a4b39740f19b7968ddf67e33dd7f4a00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142417 Malicious code in farout-karma-sqlite-pyxis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f16c0ccc134f3847d2a92330a4457c4e5179f87c348f5481d1e1a54bc674c721 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146849 Malicious code in pulsar-zenobia-sirius-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66f5376b0c0e0a0ff01dd8e01c3bab10543dba3f4dce47a2a2aa1524795a648b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143677 Malicious code in install-europa-arcturus-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 460116a7af8d018d7cca4b78507f895591676bf5b74ba586313c06e4e5d2999f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139490 Malicious code in apollo-acamar-babel-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3975bae18c661d9351a0e2be74691280b2dad94cb2b2d07b16b53da063e929ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...