MAL-2025-148629 Malicious code in tethys-pino-pretty-algol-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 467af395bce0f84fc6451ae43c6c749e70edd4dbd4beec8a23658c5071d81ec2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146038 Malicious code in pegasus-iota-config-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a7ee901b19693d954ff98d4cca16f606bc47bb75e7ed26766e07d75e3a35761 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141047 Malicious code in configstore-cygnus-envconfig-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d6200864a3393beb6b64d622c2e8175095b42f4b0a818f66e6df20d44317435 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142645 Malicious code in fornax-postcss-loader-umbra-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 383f3b0b1391bfd0c00a3d1e37ddbcccfb1df98f150dc0f63769832c19d0e281 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149693 Malicious code in xenos-vuepress-socketio-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9af27987550325036154caf57f1fc9d78ada800fca1583cb0f744df1f9a6f2f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149868 Malicious code in zenobia-markdown-pdf-sirius-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc930c5822a7bbf58c6f7f984bf76daf2b51adf0233ea6467e01ce03a493ea1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140117 Malicious code in bootstrap-playwright-levels-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecb9f73fa8fd1876ce64591a40e51714d01023c2754d029bd29814b32c7c621a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144218 Malicious code in kronos-gridsome-eslint-plugin-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d49831c60df02a4ec563dc66764d272a886cb44223adb4887a15af6b9ab643b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139561 Malicious code in aquarius-webpack-ganymede-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f3c8839bc40bff2fc831eed2f2f16a2ede89e3ad0670e7e85bb2645c985847a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145446 Malicious code in nightmare-run-script-cosmiconfig-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 224f85680e32fc803514afae57e3a670a44ee9ab4255bf6e374c5326949375d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145051 Malicious code in miranda-promise-odin-rehype (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02962f939958784843b6a0ec0e0006c8a28d63bfb1a39aef4e30c2ef00e89105 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144638 Malicious code in magellan-graphql-levels-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20526f5014eee97ee2e57fd6f52681ed6681877adc4ebeefb396c9d8ff23adea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144590 Malicious code in lynx-csv-bunyan-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d80dac0922caa37c040c9a8061b3fcec592a3beafaef79f46568ce80e1d71e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149632 Malicious code in xanthus-nodemon-apollo-prettier-stylelint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e7030e1eda3b429416cdf845e5fdc4752ef50c03422f83a833cd7e1a12a8a94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139721 Malicious code in auth-equinox-orbit-charon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a9475c3f922c44685e8fc041b480d631659d14f00c8f412a69637d2e0f5b0ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148522 Malicious code in terser-ini-sadr-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 223fea25c7a829f0d18381828d10a6eb1ff9a51c1adb446e5f6fc74b31860fdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145675 Malicious code in npm-cressida-antares-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d9e077222905d8156a630abb6c49f2ebdaa023e818242f76ceac1de7292a6eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149194 Malicious code in vortex-zenobia-dactyl-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0470d51ee094abe9965e79155fdf1af474e486e72ea8819e6dcf15e3b0673b57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145461 Malicious code in nightwatch-css-loader-charon-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e44f89d3df24791b88771155d9b2f6a6e5560407e4703e03a79c06a90ca59d19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141430 Malicious code in cz-conventional-changelog-quito-config-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f531c1a5b96fb5c266aacd15d4ae27a8090ff2b20ecc3b0874a6b3376e26d4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...