MAL-2025-143200 Malicious code in heka-apex-firebase-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f41f0381091ae082e9458edd8f1ec765ed4a9a451424985ffabe6a53d08441cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141974 Malicious code in element-ui-mdx-mongoose-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48897fe88d3818f6a236ba0cb640536ebef831b76dc9fed8b3420574e8f50f28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139312 Malicious code in algol-upgrade-ini-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac480b2708c408bd3e270ab7728873ee2cac76bfff620699b9d1e38965fe6cfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148843 Malicious code in typeorm-flare-fomalhaut-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25798a5d21cf8bf514ba263838d6f5650b41aa8b2e72e6e22c72dc364547e4ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147400 Malicious code in restart-vulcan-slides-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1416529f490fb914cb006a56abdab3149c6a5548526f1b0994d74c7e60aa2b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140694 Malicious code in chariklo-deneb-helmet-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28478627d626861b611cc3756365e1c59d62e7aa61b91eb8fd25ec2727fb6a9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144750 Malicious code in materialize-postcss-triton-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e806cad24fc90b3611ebe78f4acf26d974be1fca9b6f1a37555a0267101d4ea9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145187 Malicious code in morgan-release-it-umbriel-pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e3a7442fa158b3448186041804b991a98c63c2e060a0da1051863fc9ef2f804 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140461 Malicious code in cassini-cors-concurrently-nuxtjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8121f3bcabf23a54ce9586482341eebe56d5f0699a7d633ecd0839dbf98e468e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145884 Malicious code in ora-halley-equinox-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e17eefaa0049e9ad89efa16d16def14a0dcafe1a3cb50d8e977ad7885dd1feb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146873 Malicious code in pyxis-cors-lint-staged-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ff6de8a612c21ba192af4d769dd5031ed2e5826c6cc048594abc611bfac9b59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147654 Malicious code in sails-nightwatch-lint-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaba70c69ea7047e807d10d5242488b343ba93f28240c3d7528725e1f00a1ef8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146044 Malicious code in pegasus-nuxtjs-nightwatch-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc38e25ae939a2a042c8cf5c3865a6e8479f2d74f275f30ffd53c4bdbedcb729 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149507 Malicious code in winston-magellan-miranda-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71ee01189845db7aa342e79e837373263b111cf89d61884466e815592205e5d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139685 Malicious code in auriga-norma-test-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da79d86b866f3cc16959cbb6ce5270de1ace8196be287862f9fc39b06e0900dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147834 Malicious code in semantic-release-process-alphard-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2909c41dac1a109495cf0ea2e8cb4d523c9f422cf2ee0ae5cd922904f1122860 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144889 Malicious code in metalsmith-sagitta-less-loader-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11fb2f61876f044154c922b108b8ebbe381aea980ca4661755f6ecb8047293f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141433 Malicious code in cz-conventional-changelog-scorpius-cygnus-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d9b932b5f464ed3f721b1f8b16b8746c6996b4e4537cf98af218322ec699494 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143654 Malicious code in inquirer-pm2-graphql-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 964a75711a342b3eb5fc2ab4d78f2cf2af03901b2758dbe99095253d8708e938 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146574 Malicious code in process-writable-gacrux-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df7a73dfed72bf62e1c1142ffba2b771c5040d09b3102fe730d95184da5ce29f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...