MAL-2025-140435 Malicious code in carpo-centauri-commitlint-config-angular-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47297371af1cf02d6849edb62adb000fcbda44132fb3a3c3954bf6ef90e9675a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146617 Malicious code in procyon-supervisor-mongoose-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af5648c869f07e16773d5b96576042868921da16a9552c5dfcf968048dec6e78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142384 Malicious code in express-mini-css-extract-plugin-procyon-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2f68f50a3b19559dfa4d0186fa26e9a37752bdf68b487dd661e43193c194e1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140361 Malicious code in canopus-kastra-arcturus-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ab672036f622cc17403edf366693566cfdad9c4ddc1cf8820ab62c4cd78e965 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139844 Malicious code in babel-atlas-cordelia-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe4c8839f981728634c7a122a4d6dd3c0fa6ec46fa24d71e759a5a59c609f888 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142617 Malicious code in fornax-electron-builder-electron-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89451cce2a5eb649d2d41e81bac9973e221fc357c00c5c02407d9fc9dbb119ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147125 Malicious code in registry-europa-antares-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47da6a64a6a0952ceae89b41a52613eafa5aa8d8d0d973dbdffd14faf9b588b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143943 Malicious code in jovian-csrf-javascript-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24b158ecf3d5415472585bcd086696d2ca6e9cb147c39377fb297a2e20d6a871 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149566 Malicious code in wolf-vortex-helmet-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47b6fd913838bcf44c2bf7b0a7179956fb82c404889a6981a97c5a3154c6604a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141968 Malicious code in element-ui-fornax-telesto-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a85e910c3c85298b0c02b5c482e89d38842f8222aa17b4fd8a00163febf72fae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145606 Malicious code in non-blocking-development-avior-deneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b6100a1aca3472a8e1da2302a8ac42b4ea6b7790af85fb94874b2750fd4e98c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148795 Malicious code in transport-phoenix-sagitta-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 801a022901a26ab940ab59770527d2157a740e1c08e7818d0ef15f845271f1df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144778 Malicious code in mdx-schema-chai-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62e20418c5cc5d9a5995fe03f673118b061c32c2def8904ddb0f8507709f4343 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139532 Malicious code in apollo-ursa-tailwindcss-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07c5055c4409c3fb1e231a35760c7bde61d90da1af4606587d4ebb0be38a6c86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142389 Malicious code in express-odin-hermes-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f4a12a2e3d29015fd60bb1b74335050cd8247b08bd4de7445715a897fe6709a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148371 Malicious code in superagent-atlas-thuban-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e878b4e6fd11733f8146f15b3f2adb704edf92f18598b0e9acf12cafcb3a9c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146961 Malicious code in quasar-tethys-auth0-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9a836a7dd86aef731e1f28ca27c1096d36492ff013274685358d2995bd5b31a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149280 Malicious code in wasat-bellatrix-carina-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6e7b4fba863e8539203503c96d45117262c003514f6fa24b312460eefc90397 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149106 Malicious code in venus-deimos-public-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba1d0d778c8df669fba403d905c69e073ea9e7cb886541e7d250b5deeda1742b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145876 Malicious code in ora-altair-vega-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28f60281db13309d62314a0a9e16f3912bee556a7237b902eeda43ba95885397 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...