MAL-2025-147916 Malicious code in shelljs-install-shelljs-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1465c8c38d5c944afb1ba4dd74f73f3f3bf5ffd4534af869b355d47313c63419 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140174 Malicious code in buffer-stop-dynamo-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5ec4f8339a37679c934d37c9ed98362b947cbb4b526801422f341815e3d4c78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148108 Malicious code in spawn-wasat-kronos-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d110ed903961a6950cf5de4019f0f337122fadc51bed27728ef56e34211a329b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146341 Malicious code in polaris-flare-wezen-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7f1701576b7f75072f88478c01ff68a76e579fe05dbcf5a902e4bf45b63903e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146170 Malicious code in phoebe-pipe-repository-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5e5e991ebc3e6935e559da0f12e7cd8d6efbb7868d545cd595a7f3e7aee0ddf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141707 Malicious code in dotenv-enif-carina-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6246769778c7fcba8c511e8df6a134d3b68f727a2080940cc9609ecaa912b2a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149207 Malicious code in vuetify-dotenv-safe-spectron-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e72b52b005ac79b24237f34f7b4a002e4d2e110209c57ab77354a8a1dc6aaf4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141334 Malicious code in css-minimizer-webpack-plugin-transport-spawn-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4726ae38cccfb92349767aa6eb73f557bdef28389337380ecb62004c3fa5514 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148640 Malicious code in thuban-apollo-sirius-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69ffb6700a7e0fd845e376455a5280e4d7c5ead3a5c6ae9020842cfc8f38ab6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143269 Malicious code in hercules-andromeda-cors-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c0a65517828c759ef112b5679684b76174ea657c94c4adf54cc86b95edbff45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147670 Malicious code in sass-loader-husky-kaus-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9f5507ab2a765098b7094518c0513e392911542fbd29ea2b6ac804164375eba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146591 Malicious code in procyon-envconfig-readable-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6697fea7d29b65951aa52d6a9e51701f0dd3f5832e77e69d3997f6e525d28ed5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146115 Malicious code in perseus-sirius-proxima-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fd3f78f5cdd8c01a25adeca745497990e214ea544a47efc4370974b71923249 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140464 Malicious code in cassini-epimetheus-terser-reveal-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45d6d8fbe53d92208051c449b0c2589e7bf14cdcc34c85e706f46257023b1c4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146848 Malicious code in pulsar-zenith-triton-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2308c0086857e94cb94b05a3c706f8f73f30ad6f37c3b5774f0cf69efe612da3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139599 Malicious code in ariel-ursa-nodemon-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33c8ef633f483964dc26c0274ee176e28dfbf8faf7ca47094bdec593aed66d4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144690 Malicious code in markdown-pdf-dagda-equinox-xenos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b733d89a3db7076a64d9bff93d5266b3f7675edb92decffd204c63f8e5aeb96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139701 Malicious code in aurora-luna-ophiuchus-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7529c8b52158312b60e08e1fc053d2008b88292b60a340f064f9c5321f2c53c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145630 Malicious code in non-blocking-vega-jovian-csrf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcb27650578446fd3416420d1e95bf8cb40fbd3c2fbdccdacec4319841856f97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149645 Malicious code in xenon-grunt-elektra-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 605c1515f7a09e51dec27180935b274edf6061e32b33b0ad83fe5b42f9ce9e75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...