MAL-2025-149635 Malicious code in xanthus-rehype-sagitta-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eef357f0f0dc562b08c3cf8f51a92672a8a6aab70dcf038eef02ac1f1eede87c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146599 Malicious code in procyon-jest-ursa-rehype (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e4e8c378c417792e988304c30b5864031de74fd0ddc5df3e53b06dd10f97124 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148788 Malicious code in transport-hyperion-luna-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91d8fb53c07bdf16e476ba8daa966e8df59ab4ef2616d84220af6ed7f102a337 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145674 Malicious code in npm-carpo-vulcan-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 914086ee51ae4563ba23073d07e35f8b705aa241802887a976ff6891c372670f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146550 Malicious code in process-figures-run-script-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7a221d468e34dd31cdddc76948082d02cc61cd8a4db58ac0c975ad5b91bcb23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146113 Malicious code in perseus-sadr-writable-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbb8b258bbdf29a084af144b6809ac0622d165c66c346247925341cadc3c9bfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144156 Malicious code in kaus-uglify-js-version-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31193f251a950336823c83c49adcc35a2cc3615550b6484a164e03c4c24f51a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140866 Malicious code in colors-version-yaml-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bd2ea773ceb2fbdf90046a80e04b7e6be9d95b5dc63b05f4a9a71313a7ba964 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145523 Malicious code in node-config-vuetify-less-loader-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 413d8078725859d1005cfce9ffe26542402304c431c1b404966f75b708ed7d35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147588 Malicious code in sagitta-colors-titan-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cebfc8be6bef47c23252557742315f97d2ae7cd885f7a2ea72c3afb3faf6b4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148092 Malicious code in solis-vulcan-rollup-xenos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0a96b0f5b122804f3f0847ff18d7c5f0863a146490fdf7fec20ee26e5c12a2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142998 Malicious code in graphql-chakra-ui-luna-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5906ee4986d40f97876630539dd8bd9592cc5f5d37491360a280122f0aa9f4bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142703 Malicious code in frontend-firebase-websockets-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c35edd70c25194ae66d720396c439e8b01bd6fa5446b6d013e5813efc3072676 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selenium-cypress-izar-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74b3cabd7f11f9dfa17efb7e42f9c91371cf54fbb439240bceb7dfa0e57fe170 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xerxes-foundation-postcss-loader-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e106167988c40bc173f487701891303d610d3df571fc17138b7208a32f46b453 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142208 Malicious code in eslint-config-query-cosmiconfig-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3d4f67a49c2f8660c00eb78d5b0cd0ee38842af3b08524b54732d34fb48df93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139429 Malicious code in antares-pegasus-request-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7470d92331ac50589ccac15bd616bab9fcb1114c68a38f4c861ac672f9c8bf82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142449 Malicious code in fetch-jasmine-frontend-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfc5d365dcce5e2b678e7f28c3bd51608c01363800de40988c29530bfb10e1f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148081 Malicious code in solis-phoenix-webdriver-mocha-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d06ce9b19aa2f814732c2db3e30a62e1906e3bd92c351ecc86a6005a74160534 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145100 Malicious code in module-commitizen-ursa-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa3f26d53b29b1bf3883da585fa2b4f95ac153556379e35b88240b0e694943de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...