MAL-2025-140051 Malicious code in blitz-magellan-betelgeuse-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f5f69b47cbf03defc947d8b791ac97a071f76257cf87a5173e97303e7d827ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143708 Malicious code in io-version-spinner-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fcca631af9bd1225bc2295e4972bb17157ec73006cf5109fdfcbc42aad6da17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143089 Malicious code in grus-child-process-server-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b28413cef90aca4f8fabcb9fcb9cc4c3737e32a1247520c569f1d849bef559a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144763 Malicious code in mdx-cors-eris-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 751235892b7afbb93356cd92dba13a1ebd0cbcc7b6a6806d183fa1d20d40711e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148657 Malicious code in thuban-neptune-hexo-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75b69242a0d3a551a4ece24470a94fa434599d54aac33ce7b8b2a54ea05645c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146849 Malicious code in pulsar-zenobia-sirius-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66f5376b0c0e0a0ff01dd8e01c3bab10543dba3f4dce47a2a2aa1524795a648b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139559 Malicious code in aquarius-webdriver-mocha-hyperion-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68132720276fc1b8b24564e55a9b95066777fe576c7d605049235c96d36911c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144282 Malicious code in leda-nodejs-nextjs-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8488e7f3eb1b0a423523519eca85887ecd6c04e408dbec4c05e2e936659200fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144584 Malicious code in luna-start-prettier-stylelint-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b36b0e4f7b57545761987514b8adc6f3738abe536c5fc6500cc9826bb2af1d04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140107 Malicious code in bootstrap-hugo-altair-rehype (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector beac14029dddc28c5b4bbe056a0cbef77f3507b7b61076db87a723febc37e8a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144811 Malicious code in meissa-levels-telesto-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dc40869949a69768360f9af63c89cea3b28132151b53e72fef18b97eeaecd91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139753 Malicious code in auth0-mutation-websockets-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a95486272da0dcb64f02df91085552ced1adeb9b08f616af39826bb91826831 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147819 Malicious code in semantic-release-apollo-pyxis-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce22352efdc3f40b70caca8d6d7a5e75205d60966dd3b078d3fe713b46a83c4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144230 Malicious code in kronos-umbriel-sass-loader-cassini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccb1573c06859dba1bfe1e72f6405a360a83e2fdafc0b598805b17a2260ef7a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146673 Malicious code in prompts-playwright-cli-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc084e5b9222f52f4b8ef10f90709e8034d66f2718f5ee1aeadd37c81675ce94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140943 Malicious code in commitizen-start-radiant-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e86fb0200eb91237b731b34977008855e4d540ee3c1840f3df98357cd0215351 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147133 Malicious code in registry-rollup-vortex-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 879d4bebf6a8e3dcc6d1eecab6d437474700c1c4af14a5b05bd75267fbcd6146 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142992 Malicious code in got-uninstall-dotenv-safe-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49759109d1cc0acaae0d1c9cb915f880b6b52ed3d85f7b976f092eaec0eb2d96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146609 Malicious code in procyon-non-blocking-mongoose-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ea88450080d7164cdf4c38d5dac58f5320ab57cdd25d5d0307da65f884d7ac0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142635 Malicious code in fornax-markdown-pdf-fornax-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fca9ac077731eb9c84805cd06e984e703d20cf9bd5b748b27043de947b45ae0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...