MAL-2025-146875 Malicious code in pyxis-docusaurus-quito-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e4fdcb0fa11f7d81e3e00157275ea670dd1aa4dcec97934fc67da2394e5246b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144292 Malicious code in leda-scorpius-fusion-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95c2368d5e556c53b4ae55edbda2692a0cbd772956bc8ffd3bdd54d97d120dc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144459 Malicious code in lint-staged-library-fork-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 599e178fbd7b06563cee8ffa42611bd250dbf206a67592c620ac211ef0d23d4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141170 Malicious code in corvus-wezen-airbnb-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6625e439e124c01a9f05e73f792b5c19bce9c32a4010cc52be079d4af8f503ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145789 Malicious code in odin-auth0-spica-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33e2a02b14f805250844e02207a8da2c9897a344b77ef90b326bf6fc029b0590 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142898 Malicious code in gemini-grunt-spectron-webdriver-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector becd2eb0f83b8c1e751ec487940539f95186eba20bfebf72fa8634b5c6935a7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143299 Malicious code in hermes-antd-local-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c86117e77ffd0d2762aba9be413ca8dd9a6ae20efcac1e83cd70d63b05b6ab7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148612 Malicious code in tethys-canopus-altair-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 720f562573581774561c4c0e0a5968eae5270291c8a7d4809e40a194989869cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141513 Malicious code in delphinus-browserify-playwright-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7488bf1c84cac1534c0f648411101f77dfe5e87d49fa0fd80d42b09b61442089 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145756 Malicious code in oberon-sass-loader-supervisor-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b7b1e210facbd36613bd9c96454dd87c2f4600da4d05b499d8cd657036675a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144444 Malicious code in lint-perseus-betelgeuse-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0fa8f8962f849977da38989af1f68903aba39062e31527b08d77f2cbadcec83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147277 Malicious code in repository-orbit-scripts-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77143559d13fe2d5805ab64cc22bf717f4cbbee31e77b3c0b72bbe442dce8d52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146326 Malicious code in polaris-betelgeuse-html-webpack-plugin-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d019ca346c566d05986b11fd678198d3a7f42e5ef2de48fd52d62dc516a8c9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143118 Malicious code in gulp-mensa-izar-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a75fb3ccefc8bcbdcfb2e4436dd2f9ac85c0abd3f44fc280455f24a5c155ef18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140286 Malicious code in cache-telesto-antares-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edf2e5258e5816f646e8aa2e161245fc708ecb2160fbaea032bdea23317897e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141337 Malicious code in css-minimizer-webpack-plugin-winston-jwt-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 060b575529075e328bff1c8bb906ea7952c1952b5ee9251977bae0c8fdf4f543 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146376 Malicious code in polaris-weywot-ganymede-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 170d3e04ad289a69b3ceb68f5917088fd708a09b8b96f4ab8261e3123b32e2ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145607 Malicious code in non-blocking-dorado-reveal-md-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a02083361929600142cbbd362da8df6c63f05a2d0cf83912d9c9c02aae394daf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145484 Malicious code in nightwatch-sagitta-react-bootstrap-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b756af5418b76c87b1f10fd6dea75fffff7258a94a050ec1566ff5d8e2f81a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146973 Malicious code in query-morgan-thuban-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ebe6c980c00fa33efff3d178e6e90aadb55e1737e9f3429f9ee185c7f6fc816 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...