MAL-2025-144638 Malicious code in magellan-graphql-levels-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20526f5014eee97ee2e57fd6f52681ed6681877adc4ebeefb396c9d8ff23adea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141810 Malicious code in duplex-gridsome-antares-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05ebe8ecc207c1773caf691799f0028ead9f4ce74df00b2bed7ca7bb70dd6e88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148914 Malicious code in umbra-browserify-enif-jsonp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5200f30b2a52062b1a5052b0b78a3d6eafb3df7d791ba50739e46eeec77116b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141753 Malicious code in dotenv-safe-global-jsonp-centaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f253194bc152f223c5f587a9c7fd65460595c70d27749389763c4afbb0de8ed2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145744 Malicious code in oberon-event-kaus-remark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4085211a36343e3d9c15916985078fa44303d1d7c825bd339581113f3770c0c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148522 Malicious code in terser-ini-sadr-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 223fea25c7a829f0d18381828d10a6eb1ff9a51c1adb446e5f6fc74b31860fdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146517 Malicious code in prettier-stylelint-sails-eridanus-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8446d0b83907d6840faf8bd380dda83cfec2d30fd3c7af28b08d939813dfa0fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144613 Malicious code in lyra-leda-css-loader-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6b65512863f456afde79316705ac47d3730e71049e0ea42f9e6941aadc0dcea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142622 Malicious code in fornax-grunt-zephyr-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5618c03ace1b7982597f2237ad3ce62c1e20dfc2b23419fe11450d9d6f70b7d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149076 Malicious code in ursa-spawn-writable-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98529c833cbb87e017a27e085a759a2b5c2daa8f6c81183a5d835f87821f4d84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146512 Malicious code in prettier-stylelint-nashira-start-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33ebd32b4bf8b3a577c8241ab5654cc0cbfc3b39f81ee7cffe476b70f977a77c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139892 Malicious code in backend-npm-jwt-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09136761d6da122525a069f277501a34c59bd81659e1a421f38a2c0fb946a205 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144777 Malicious code in mdx-sadr-chai-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddb09f5e2a7704baa6438a141cf28d13bca7213b991283293d34302c18bb1c7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141976 Malicious code in element-ui-nextjs-charon-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccf1870bf9d264375464e548d8535ac54a699ad95615e37cc390f8af9a2ec280 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139301 Malicious code in algol-node-config-soap-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bab280bff732998bb8bfe8b8157bc57c923098a5f4503da372fb8508a4b66a0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142978 Malicious code in got-enceladus-aether-terser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd05fb12363dc6a9c123b7274c9b266820561db8067462d96b4bf44c9a09a52f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147577 Malicious code in sadr-scripts-css-loader-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0668623a90f94b66ef71705f830dfabd5f69de9d20153943ba3999737523cf1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144753 Malicious code in materialize-rocket-standard-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0709cf7247b61cb50046c0d471edd39a3f667382a74aa4aa13b18ee742f99d84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143485 Malicious code in hyperion-markdown-pdf-janus-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4d4e1b0851cea8515c564e889b68650b0cd90bd44082828b01a23f152132fe3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148846 Malicious code in typeorm-gridsome-vega-writable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91ae7c566eab25bc74e5af7d016f797ca509921a1608b9aa315acc4ac93808f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...