MAL-2025-141923 Malicious code in electron-nashira-deneb-norma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b6bba061dc6503534fe0cb96c556dd9eb19f586a2cb1797fd05c0f28879fa75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145507 Malicious code in node-config-flare-elektra-xenos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 152e0f9d53e98bcf6b041b29988e6f2da083d076da61a67d8b2c48005d4b7d36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142567 Malicious code in forever-fetch-flare-farout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b4e98e20c61d5c173d509fd0efa7d781ac49aa4774424b9740703ed7156b521 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147213 Malicious code in relay-xenon-arcturus-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea5240b3ede1f9201b1acc524faa01c01e3c11b02638005b3793905ffd25a4f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tethys-helmet-markdownlint-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7dd146f8b14178ac1a675fc49a5c08c881775ce18fd6b985c364ac18b26bbb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141039 Malicious code in config-sails-repository-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ef22d2e7c169092869951d0002a750ed5d23a4793af0396d7f0f5460b51b67f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144126 Malicious code in kastra-phenomic-eridanus-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47b4edf03fe4eb9a57ecb323f2a9f3f66d89c70eaa645d4cfdf4a30ac5e9285e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145331 Malicious code in nconf-tool-magellan-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a68a8262a254f0a9406a021375b356e800849625b8e96972eca8a227193dce94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144162 Malicious code in kinetic-antares-weywot-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bff93183c6f42f2fb75cd6083a89b6b5d26427d278de47384359f61e64082ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-config-materialize-adonis-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59baa87091f03af93dc192d05b76ada4672396aca266ac78ba95b64bfd3a5401 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142485 Malicious code in figures-version-carina-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3513c6b2aae948d358ed83dec49f13f53edd21ddd9d26e0a8146e9d9bfc18824 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148904 Malicious code in ultra-playwright-flare-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efc6a1c7c442c53b194a331d867177d214e9c376b7f6a3f4abcfc5130d46dba8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146789 Malicious code in publish-impulse-package-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 195a18bbc2c340fa49445c8f98d48a8db2dd0d999cf1608f8d386a97d2d7cbf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141493 Malicious code in deimos-graphql-procyon-aurora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c04c5e0e69cc449de0674247a3157f77fd9436b0b2b13b415c65aa14f991fca9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149074 Malicious code in ursa-schema-norma-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed297aea32ffff06bd657cb24540c11c48fdda93ec9e7a04d4f503346065c10b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144739 Malicious code in materialize-europa-install-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c34f5b580e515d57b2f97959e41b59126793c501180fdc1ce97b11c5f06699d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148604 Malicious code in testcafe-sass-loader-morgan-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aac300cbf341a439102ac5de910036a209bde2e17e4223530fd3be37228557d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146602 Malicious code in procyon-kronos-materialize-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ced02c917dca028be82a66f333ee6a3354a49e9e41ad42fff078c5d42473318 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146838 Malicious code in pulsar-orbit-capella-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62bdca590ad06adc6837f3786b26dd80e42dac494df369de6e0a72cf115db638 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144449 Malicious code in lint-staged-commitlint-global-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 304b77175b845c66db53476f7ce9d03f92d733e55c29c84ccab5770fe6f45bc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...