MAL-2025-146641 Malicious code in promise-graphql-start-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2289446017d83cf85ed806fb6e736a6f69f9e8d4e760a2daf3d238881af564bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147290 Malicious code in request-cordelia-cypress-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e66fb1c730dec97f29ade6b1d6795405786d119efa2bdade8c8b96b568991474 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143532 Malicious code in ignite-xenos-uglify-js-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c6b28600d0a5b6fc572d1b0eb6ef55abcfaeae911378facaaa2446d3aafea59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139956 Malicious code in bellatrix-rest-blitz-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92d051a410ec4e152e8429393d4f69c4e39cb62b3f53704d5f7a54d4a087b454 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143092 Malicious code in grus-envconfig-halley-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 685e558751be0ff44bf9e4c96d7586de4b6b3509fa5eb90db8718448fe4a02a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143402 Malicious code in hugo-spectron-webdriver-oauth-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d0ebeb42b34d178ed1859055aca3c46a2421dea6dab1676a05906f340af7f1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140496 Malicious code in castor-spinner-async-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60a7ffb45dc2db3ff1f356c7e393e67f1de1d339af5165815c7bc65a9702f209 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140847 Malicious code in colors-dotenv-safe-backend-optimize-css-assets-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6116a38ab2e392b9841b501586a3f93c8ecb5457593cd69dd4d601275c119002 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142973 Malicious code in google-xerxes-dotenv-safe-jabbah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 144d57ad69e3cbf66d737ae2db5e7102a7489e5a07e294d84196fe3ebc72c974 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148214 Malicious code in spinner-venus-izar-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d22743ffdcb88a3ad3f6bc32150254dadfa3f45695c7f11d0e9a16ea3ac1d126 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143507 Malicious code in ignite-callback-node-config-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8894545ee7492ce0676852567fe5d3d6b2139f08799c38602766a6a8f7f91fb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142708 Malicious code in frontend-meissa-scripts-charon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b7993005ccd89c0204660a1eabf207f62018f8177e86a80e44ab904f81bd861 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148719 Malicious code in toml-node-sass-lint-staged-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9998636ea0a280ddec64a269b14991a32a187101be27f6e27765845c99e790bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142006 Malicious code in eleventy-mui-public-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b7c3923fbceba850a7b53be6ef71d2a7320d78a6eb269991e0173371bd66543 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143200 Malicious code in heka-apex-firebase-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f41f0381091ae082e9458edd8f1ec765ed4a9a451424985ffabe6a53d08441cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145249 Malicious code in mysql-janus-chromedriver-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c904af5710a1d1c2af77e3315bee7c6b13290ac02f7195ddea52a05a82ff104 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145900 Malicious code in ora-yaml-yildun-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09671570cc0ec4dbf6e1be086b159d12ee823cd32564bfae08539f2b51fce710 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149075 Malicious code in ursa-shelljs-buffer-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d64623aaf04619e9dbffea237cff686fd3ea843cdbfd2893241c7cf8b3430d24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143129 Malicious code in halley-auriga-prettier-plugin-markdown-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 121edc4555579663ed0cdd1b890a4798334cbc15d4f177d9d961e054c2b64395 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146062 Malicious code in pegasus-ursa-aether-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b3883d3f8b0e6337de853aa12f51a368247945a18528374fe17fcc9da15d9eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...