MAL-2025-139921 Malicious code in bellatrix-aldebaran-hexo-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4819b15080774e0af4a0c079224ff1d422220c1817dfaa44d07aab13d0568164 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147222 Malicious code in release-it-eslint-nodejs-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d444f73fff49c045d0be36d158676f122863a24f8391209244c38f04cdf90bb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142647 Malicious code in fornax-pulsar-phenomic-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5bd18961a6749b1c841892122d0994deda449769618a1ce0ba23e402e00ed23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147278 Malicious code in repository-passport-vortex-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50013f5f24460ec3a298657a62bd80113b5ac1eedbae8ee0ef592afbb0383fbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139828 Malicious code in axios-exec-umbriel-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f961ce0c9fcf488462a54c9cff34ad6de5a026e596e381a681ffa5e5c0620582 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149280 Malicious code in wasat-bellatrix-carina-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6e7b4fba863e8539203503c96d45117262c003514f6fa24b312460eefc90397 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142306 Malicious code in event-backend-bellatrix-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb5595b1d4ec3c6ec493010da0a65ce1110cccaa8064745ea9cb362a6791bd2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141707 Malicious code in dotenv-enif-carina-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6246769778c7fcba8c511e8df6a134d3b68f727a2080940cc9609ecaa912b2a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147670 Malicious code in sass-loader-husky-kaus-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9f5507ab2a765098b7094518c0513e392911542fbd29ea2b6ac804164375eba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146733 Malicious code in proxima-quark-metalsmith-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab4aae4c332685c2475875b54f3211039ce0bafed36983db9615d4497cb7938a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142228 Malicious code in eslint-plugin-chai-lacerta-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5ac9c2490e31cd01f911ada3fe41b454765bdacb067fe04d3d6dd4851be3643 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142389 Malicious code in express-odin-hermes-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f4a12a2e3d29015fd60bb1b74335050cd8247b08bd4de7445715a897fe6709a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149207 Malicious code in vuetify-dotenv-safe-spectron-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e72b52b005ac79b24237f34f7b4a002e4d2e110209c57ab77354a8a1dc6aaf4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147076 Malicious code in readable-astro-npm-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c647e05dd037905883f77cef6440b9ac81382f0ede90b58ede2e43bfc6a99a88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148793 Malicious code in transport-mensa-tool-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b711e55d7e247b8426e9450555e8fd0d78164118f6e17df135b162418d22abe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141437 Malicious code in cz-conventional-changelog-zenobia-javascript-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f2442a2f792bd52751317c2d99d2e451ae980812d3b156f2d4e8ed8ac4e3897 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148473 Malicious code in taurus-miranda-yonder-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9522058eacf385789d7b9d2dab9db3cb50cac6b1660e926378d440f667f67abb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139599 Malicious code in ariel-ursa-nodemon-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33c8ef633f483964dc26c0274ee176e28dfbf8faf7ca47094bdec593aed66d4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149106 Malicious code in venus-deimos-public-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba1d0d778c8df669fba403d905c69e073ea9e7cb886541e7d250b5deeda1742b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142106 Malicious code in epimetheus-repository-package-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6fc976d3ed6b582841dba0a53f2ac7f4e88026b21109e58de73df97556d4ebc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...