MAL-2025-146833 Malicious code in pulsar-html-webpack-plugin-yaml-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de284ef22c3d79d0eb08d849bacc79b6b331418af35f35cdf63627b30baba057 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146861 Malicious code in puppeteer-prettier-plugin-markdown-loop-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c09e89a9ea92244153433e928b97428ee04b1a431d3f3fa32f58050b91df40af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143657 Malicious code in inquirer-redis-nebula-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 105fc3f9e64bf199b43c2e0445127977e9c604d6964b88bcabec49ef31477748 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142629 Malicious code in fornax-leda-algol-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcf7319a670b7da559f6482f696730c1f657141bb058aebb8a53aebb164f1914 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145654 Malicious code in nova-cli-cosmos-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a6b8ac52d3123426f5132fd67a06e0827677939e3a3e3f9791efae39d16a263 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143524 Malicious code in ignite-puppeteer-sedna-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35174f4fc9f936f9c62e71fd6996be4ca74295263e938ba94323a36ce579ee12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147204 Malicious code in relay-mocha-mutation-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aba86765ad1d4909a393eb1d62de286cacd7f00f07a84862e0f6f275d9553d71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in husky-global-lint-staged-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f4d5f79c4d1a26757a542e6f25f54750d63a47fed852f3fc6decaf700d2b8cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nextjs-procyon-postcss-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5e01c23ae81811c86732763e0d2d2158dde05a07a044c0da8c5f141775f2224 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in node-sass-cli-charon-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f32e51d72c3d0f1f895665fca468290ffd1c71c1ffefce6a9d6d60b92d1e49c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightwatch-sails-ganymede-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10ea4a6bd86777913b9e895810654aab55c148a31c0fd044300c2edbed524768 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147793 Malicious code in sedna-sequelize-less-loader-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c21acb639bbf2efdb260ea223c2b12d93b35a5e8077ec424222d65f38559509f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140807 Malicious code in cli-passport-iota-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac1c96bbd01bc353cd4d6dd7efc63eb0ebf5878a52296eae35df15e5308f6326 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147724 Malicious code in scripts-arcturus-capella-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a234270a69e264a43939406df15afdf5f18be1d2553e69856deddc166eedb52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149594 Malicious code in xanadu-electron-uninstall-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0597b15a125f89f0a8bfef840956f33b02adcc1c53efbe7055a7739d69bb71f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139919 Malicious code in barnard-vuetify-lyra-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07108cd652ceada4468f324d199ae04c8c6c8ba9df2e5ec80f10369d97ecec95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146618 Malicious code in procyon-test-dactyl-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fa92a6112015e2ca4da64b0b94ae2b75baf7c651a407943d4d21741a0f4a71a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148031 Malicious code in soap-postcss-kaus-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f1a9cf6fe05acdb7591a3ba704a2acfa5bf5787d9da06b4e57b260154da4174 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144560 Malicious code in loopback-puppeteer-orbit-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfb39e2620d3390231bb1f11d856b5d83153e0517c509f97d497defe7de83a26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143398 Malicious code in hugo-rimraf-eslint-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 074c78f0a4fae1045293325cfb302d1b4d38bfcac2d5281d407656997d74453d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...