MAL-2025-142831 Malicious code in gatsby-antares-writable-centaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a26b78aef3942d60119f4eb9ae9dcea573b79c20d31c8aa198ef687ab7d493d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146625 Malicious code in procyon-wezen-html-webpack-plugin-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67b5af772803ada032750ec3f8403347e7a424e0ea7df55a1c9aadd26abc0e2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139558 Malicious code in aquarius-vuetify-radiant-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adf5f6da4af39414fdfb5df6e113ae36c643af521c366f98cd6777c2ee0b13d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144032 Malicious code in juno-meissa-electron-builder-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21c5ab002ce179a55f0a3e800837dcb74582c94b814ef5bca6c96140113755f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147675 Malicious code in sass-loader-meissa-pino-pretty-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a246180b1e7c49c62f2f18f439a38315a0f41c7affafa8418bbc4b48d1a8f63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146789 Malicious code in publish-impulse-package-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 195a18bbc2c340fa49445c8f98d48a8db2dd0d999cf1608f8d386a97d2d7cbf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148540 Malicious code in terser-triton-element-ui-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d790e4c59825ea9cbfdb156aac422fb536844ddb3ac72f22fa69562dec2a150 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147213 Malicious code in relay-xenon-arcturus-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea5240b3ede1f9201b1acc524faa01c01e3c11b02638005b3793905ffd25a4f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144126 Malicious code in kastra-phenomic-eridanus-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47b4edf03fe4eb9a57ecb323f2a9f3f66d89c70eaa645d4cfdf4a30ac5e9285e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149358 Malicious code in webdriver-mocha-nashira-aurora-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cb31fd775f1268ae9f1b1b064a05a45c2af095dc6bd9245bf60669d8cdf8df8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142148 Malicious code in eridanus-io-andromeda-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b61966f7ae737ec265e1bf5608c3a100b68294f97ab9385b45a839ed4ada343 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142368 Malicious code in express-barnard-materialize-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4a191f03d0de88e41b68a22ef71a0a8b68d26ab8cd334dde584afdb34ce36af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145608 Malicious code in non-blocking-dotenv-safe-got-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97ec042cfe2b369dc9c550415ab4881c8b222e5b9e1b1ffd6d863083eed4048b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146900 Malicious code in quantum-cressida-registry-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 848323cdde2a4eaa6bed6671fbcbafbe9d1ebd010579191a4b1a43554dd28054 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148013 Malicious code in slidev-xanadu-xo-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abf83cbecd9577fec842ad64f7f847b168a1ad3aafbbfbceda5b0741cc06aac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149667 Malicious code in xenon-umbriel-jest-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4789f13d13bfc6480462c74df2249fea0b3264ce877ca27a1707785b3777eac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144714 Malicious code in markdown-prompts-pegasus-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dda1fab30f9cdb224c6c52023b756f44b91b0d21d4e6f6436b9b8fe36f7b7a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147648 Malicious code in sails-jabbah-pegasus-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6860061d743f6953d2851725ea2189350d37e0e2b9f3c1a48631a6ba4b8d84aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149487 Malicious code in winston-dactyl-figures-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26a6cdbfe14a015e68b53836ca42b5a956f3b9133e9f6f9fe21da036ae347c6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140349 Malicious code in callisto-readable-europa-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9db60a5246fcddf3c7698341dda6b5fef26f7659978b69669b34dd4547503b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...