MAL-2025-140435 Malicious code in carpo-centauri-commitlint-config-angular-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47297371af1cf02d6849edb62adb000fcbda44132fb3a3c3954bf6ef90e9675a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140464 Malicious code in cassini-epimetheus-terser-reveal-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45d6d8fbe53d92208051c449b0c2589e7bf14cdcc34c85e706f46257023b1c4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142852 Malicious code in gatsby-tethys-private-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e031bb5a34be3b533614491c540dd7cabd176f1d9dc578b0cdf0a38a52c14010 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148817 Malicious code in triton-ganymede-janus-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5d84855f4774d7e9b77b3a1750e1d3b87f1210412e2f75f70e5024ae188d902 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146492 Malicious code in prettier-plugin-markdown-proxima-webdriver-manager-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9dc5b75c820f660af7ac765ce748737d7029924367551e7bfb04127b2b8f42d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147916 Malicious code in shelljs-install-shelljs-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1465c8c38d5c944afb1ba4dd74f73f3f3bf5ffd4534af869b355d47313c63419 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146961 Malicious code in quasar-tethys-auth0-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9a836a7dd86aef731e1f28ca27c1096d36492ff013274685358d2995bd5b31a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142389 Malicious code in express-odin-hermes-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f4a12a2e3d29015fd60bb1b74335050cd8247b08bd4de7445715a897fe6709a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146115 Malicious code in perseus-sirius-proxima-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fd3f78f5cdd8c01a25adeca745497990e214ea544a47efc4370974b71923249 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142994 Malicious code in graphql-altair-antares-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d65a553235b8b5f8dee224e120bd0300ba09dc2e68d4079fe9d9e1f26efa32c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149450 Malicious code in wezen-airbnb-apollo-nuxtjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 497b37af348964b032eddc3ce59b194d73d50bcef3f435254bfc827f0218a106 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145346 Malicious code in nebula-mdx-polaris-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b597abbb8f843368a4693e7ff646c15e6d201318b0ac904a36d5fd327456cd0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142225 Malicious code in eslint-plugin-apollo-supervisor-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c97c4417371354dc864ac05316ad3f9ffd6bf4a85eeec03dd87dd816e428dc88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148640 Malicious code in thuban-apollo-sirius-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69ffb6700a7e0fd845e376455a5280e4d7c5ead3a5c6ae9020842cfc8f38ab6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146733 Malicious code in proxima-quark-metalsmith-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab4aae4c332685c2475875b54f3211039ce0bafed36983db9615d4497cb7938a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andromeda-csrf-got-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b156646e5ae6831d28447dfb85a6d23732f46c59aebb936a8622ec2da9d24ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vega-bellatrix-rate-limiter-xenos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9372ea6c6e60fb1a3e5bac7534c0ed7ccca3a38a06f7426b418d0f6593484058 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145630 Malicious code in non-blocking-vega-jovian-csrf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcb27650578446fd3416420d1e95bf8cb40fbd3c2fbdccdacec4319841856f97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148371 Malicious code in superagent-atlas-thuban-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e878b4e6fd11733f8146f15b3f2adb704edf92f18598b0e9acf12cafcb3a9c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140654 Malicious code in chalk-run-script-prompts-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82ea2258006845312d46ca56f78e72c5ffbae2d7e22d59b5775e81b258d8558c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...