MAL-2025-142485 Malicious code in figures-version-carina-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3513c6b2aae948d358ed83dec49f13f53edd21ddd9d26e0a8146e9d9bfc18824 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147039 Malicious code in rate-limiter-hermes-eridanus-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03f0477fee44eef063dbf923c1cff622b1f8d7342d1bbf8a706c43e1a8d279d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146537 Malicious code in private-ora-react-bootstrap-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f70d86f10e498a68c8467eb0549e813ea9e7d89fa7faabb6bde280ca072604c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140238 Malicious code in bunyan-airbnb-hercules-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 902c506105d9f9aecaf0110f61001522b5075ad62329ab9cf6b79c9f6f56cf68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145648 Malicious code in norma-registry-async-geckodriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13eb62efdc128819d4e6c73446ceb745d539c8ef9c8e3debdd1972bf6210cd8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147062 Malicious code in react-bootstrap-jasmine-restart-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1a0d9a9042d8fd233d6e74a451ea09d2b6c63f1d29c3db92cb84b1dfc400325 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144449 Malicious code in lint-staged-commitlint-global-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 304b77175b845c66db53476f7ce9d03f92d733e55c29c84ccab5770fe6f45bc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147657 Malicious code in sails-terser-bulma-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0b5d4a721c3461428afed260576084177aa8a1f51ebdec6342d0cc814bd1c06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146847 Malicious code in pulsar-xml-nextjs-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f0199654cd2a544402f7fa4493d46c06e17e6e76ea2056d0a17ae90f068059f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141436 Malicious code in cz-conventional-changelog-transform-kinetic-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ac90554ba04c26db8c766211102ee31b9b49ce27e14ea6f2e29a5a1bb870369 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146129 Malicious code in phenomic-despina-dagda-xenon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab449a137192f276f029ef3c6b3f440fb5830046c09e761a0471ccc9abb43b51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144351 Malicious code in levels-carpo-fusion-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03d8d5f23e9140fa627019e2ea08fbc2a8abf4e959025b337ee09e444f301e6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144739 Malicious code in materialize-europa-install-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c34f5b580e515d57b2f97959e41b59126793c501180fdc1ce97b11c5f06699d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141018 Malicious code in concurrently-ursa-betelgeuse-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d34cec0f8ffbbb35058704f59236fc00d2feab74e455c018f7971f2d20d13b78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143434 Malicious code in hydra-bellatrix-backend-sadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9ab935a68be6a70f7ba6e91ca1a630274d8ffea77cffed2afddc09aacf072dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145347 Malicious code in nebula-meissa-shelljs-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfb81e90c76d751feb2f2117f1826265a6d23d702d9560c78ad944dd9b7a17ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146603 Malicious code in procyon-local-npm-cassini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57fbdf3e9b64bd0336eec4eb812a9f46e802ee7dd443fbdc3369a8d80c3be236 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140968 Malicious code in commitlint-config-angular-meissa-eleventy-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f681ba9550446a588220fdac2f9b56dc00be490c463173006f33d13714544082 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149243 Malicious code in vulcan-leda-auriga-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5086134f060f78e8bd2666915ded5575a2b0ac781abe295b75d87751eb90fdc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146719 Malicious code in proxima-hyperion-vortex-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adaafd343659e7777c9a7a305eff3bc02b790d3119815ad8231b911b0c801068 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...