MAL-2025-145630 Malicious code in non-blocking-vega-jovian-csrf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcb27650578446fd3416420d1e95bf8cb40fbd3c2fbdccdacec4319841856f97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147916 Malicious code in shelljs-install-shelljs-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1465c8c38d5c944afb1ba4dd74f73f3f3bf5ffd4534af869b355d47313c63419 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139182 Malicious code in acamar-perseus-leda-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02c01d851b7518dc08365875d2faf898162379eab5f57f890791a44de7fab39b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141691 Malicious code in dorado-leda-module-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 473ac230a1d7605a528320678f1622a86249ae3a4271e3a13c1157044eb153a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145878 Malicious code in ora-bellatrix-global-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c53213ed86344c710c0b8992fd454b6e99b2e0e6e47dd5aee0188e2e45bd059 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146195 Malicious code in phoenix-fornax-dagda-release-it (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63e1afb780470eeeba8be9d5c67634863b839369e2b60331b4852a3a9d3a32e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140123 Malicious code in bootstrap-terser-webpack-plugin-winston-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4c70c900ce100fa38a9006c7544ae598fcfe7ee0b5907a4a48e068f95db4936 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145582 Malicious code in nodemon-less-gravity-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 405ba04f7fdaecd140dfc69f1313e561ea136c3ba12352ca7657e3bf0897080b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139701 Malicious code in aurora-luna-ophiuchus-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7529c8b52158312b60e08e1fc053d2008b88292b60a340f064f9c5321f2c53c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148850 Malicious code in typeorm-materialize-meissa-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7431473a2a7d044e265be1ea3717a4e6f421228d6e8498e8954d81e8b54ed221 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145022 Malicious code in miranda-cache-relay-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87c25fc48147bf1c6d99f70b5ca2cebb2d623c4e9b7720ff4dc0a30b4de084de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139532 Malicious code in apollo-ursa-tailwindcss-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07c5055c4409c3fb1e231a35760c7bde61d90da1af4606587d4ebb0be38a6c86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141544 Malicious code in deneb-heka-callisto-xenon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c47df3bef2c700947f281909714cddff1d29ff8299d9ce06f60c0db7d466a173 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144778 Malicious code in mdx-schema-chai-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62e20418c5cc5d9a5995fe03f673118b061c32c2def8904ddb0f8507709f4343 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145876 Malicious code in ora-altair-vega-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28f60281db13309d62314a0a9e16f3912bee556a7237b902eeda43ba95885397 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140174 Malicious code in buffer-stop-dynamo-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5ec4f8339a37679c934d37c9ed98362b947cbb4b526801422f341815e3d4c78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147419 Malicious code in reveal-md-oauth-jsonp-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 942efe758bf59cfbd35ecde32f1b9cba47a8915da2bea6632870da311e5ee031 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149116 Malicious code in venus-mocha-start-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52d1cc69d270a33ba2ba84e61c8cfdd3271303ccc4b24590d7adc20af1c71d1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148371 Malicious code in superagent-atlas-thuban-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e878b4e6fd11733f8146f15b3f2adb704edf92f18598b0e9acf12cafcb3a9c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146617 Malicious code in procyon-supervisor-mongoose-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af5648c869f07e16773d5b96576042868921da16a9552c5dfcf968048dec6e78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...