MAL-2025-145022 Malicious code in miranda-cache-relay-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87c25fc48147bf1c6d99f70b5ca2cebb2d623c4e9b7720ff4dc0a30b4de084de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141691 Malicious code in dorado-leda-module-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 473ac230a1d7605a528320678f1622a86249ae3a4271e3a13c1157044eb153a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141707 Malicious code in dotenv-enif-carina-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6246769778c7fcba8c511e8df6a134d3b68f727a2080940cc9609ecaa912b2a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149566 Malicious code in wolf-vortex-helmet-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47b6fd913838bcf44c2bf7b0a7179956fb82c404889a6981a97c5a3154c6604a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144578 Malicious code in luna-phoebe-despina-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ecff078b7d6ee9dbb72b33f4db4f7635fa8887e98b1db63f8fcaab39c219a81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148648 Malicious code in thuban-development-transform-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9970fc2cf7485e3a83f92015f3ef345dc16d84cdf3b6f96adcc69731705a2da6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149207 Malicious code in vuetify-dotenv-safe-spectron-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e72b52b005ac79b24237f34f7b4a002e4d2e110209c57ab77354a8a1dc6aaf4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145606 Malicious code in non-blocking-development-avior-deneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b6100a1aca3472a8e1da2302a8ac42b4ea6b7790af85fb94874b2750fd4e98c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142106 Malicious code in epimetheus-repository-package-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6fc976d3ed6b582841dba0a53f2ac7f4e88026b21109e58de73df97556d4ebc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149450 Malicious code in wezen-airbnb-apollo-nuxtjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 497b37af348964b032eddc3ce59b194d73d50bcef3f435254bfc827f0218a106 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142228 Malicious code in eslint-plugin-chai-lacerta-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5ac9c2490e31cd01f911ada3fe41b454765bdacb067fe04d3d6dd4851be3643 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141825 Malicious code in dynamo-docusaurus-iota-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 601da33a7c94325665c58104eee0e56a78539f7d9cc24487209dc90c3391df2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141968 Malicious code in element-ui-fornax-telesto-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a85e910c3c85298b0c02b5c482e89d38842f8222aa17b4fd8a00163febf72fae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149116 Malicious code in venus-mocha-start-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52d1cc69d270a33ba2ba84e61c8cfdd3271303ccc4b24590d7adc20af1c71d1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143810 Malicious code in janus-firebase-postcss-loader-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2c907e58d3064898e9b9c09eda9c01d441442c88ad82927681a0e077abd4c7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142306 Malicious code in event-backend-bellatrix-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb5595b1d4ec3c6ec493010da0a65ce1110cccaa8064745ea9cb362a6791bd2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146492 Malicious code in prettier-plugin-markdown-proxima-webdriver-manager-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9dc5b75c820f660af7ac765ce748737d7029924367551e7bfb04127b2b8f42d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140234 Malicious code in bulma-venus-test-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4201069df227c6ed3a83016368b73803b06102600a6f33fd00fa86c969fae75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140464 Malicious code in cassini-epimetheus-terser-reveal-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45d6d8fbe53d92208051c449b0c2589e7bf14cdcc34c85e706f46257023b1c4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145807 Malicious code in ophiuchus-bellatrix-dorado-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03673651d02973a35847143bf4a13afa277c604a96ff85ddbe32da69d5d2dfd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...