MAL-2025-149161 Malicious code in virgo-neptune-rate-limiter-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1fb0f24eab897236a8f82e3344699506bb8f68e405e72048c7db8a045739259 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142631 Malicious code in fornax-loglevel-xanadu-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f4564c10a88dbb40742a117cd51e90da16d563a33c2464c01b686df5490cb33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147914 Malicious code in shelljs-heka-sass-loader-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5871ea757e490a9e46ade975af00b2bb098c27078665ac19ea9b198e1328385d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143257 Malicious code in helmet-nashira-carina-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd3942757ca6d78d183bd70caaf20bd6ccf9cac9ee730bda9da89573f57e331e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145605 Malicious code in non-blocking-colors-xml-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a7c05a91dd751ebc574c9fafe6c079484def23e71f2a4ea9eb425dd310c652c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139277 Malicious code in aldebaran-framework-hyperion-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3418701e16b294cc4b581fc051b877d64016c7a2b59116cf1437167e2fb89aa2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139984 Malicious code in betelgeuse-hugo-promise-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70a25079b613d6030c816cc270a257bdc5bb2c7b5b0b294acc68937fb741bd31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143069 Malicious code in grunt-prettier-chromedriver-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c23644cb4dbe3d6725f5ea83a20e4ec4b24fc724d6f4b8fa491da874661a1dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143110 Malicious code in gulp-await-antares-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83c25349f10db35ff11b0cf94364dc21cb5982f02a40ff0ff3feeb8acd1dc244 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147323 Malicious code in resolvers-eslint-markdown-pdf-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d5edddf5489e959e628e53fc66c2bd0cffb613bbbcba0037d36286e701a0450 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141428 Malicious code in cz-conventional-changelog-procyon-remark-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c732a75d8b1028732f8e692b70aa16efe1be01bfe1e238335f1dc2b52dfa0b0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wolf-yaml-morgan-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f25206e1cd05dc85dd05c82e73701f1ebe05803670e00cc1cfb99149f6ee5cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142663 Malicious code in fornax-winston-browserify-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f681f131eb8845d37ee1bdddfdb57567b5d6228bab90e97c2fd18160b3c7679f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144819 Malicious code in meissa-ophiuchus-less-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8518a814cafbac1fe3b24bde9c440231a89ec97e3377a71c305e1bb5c795f498 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146472 Malicious code in prettier-nuxtjs-metalsmith-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc0530eb1ad39700c42120f582e87d6140918e039de76026941107c4042d0a81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141404 Malicious code in cypress-quark-celeste-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ea4334579260db551945a868a011ad61151a559d906846ade5299adf7561ad8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139470 Malicious code in antd-websockets-promise-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fb7a47daf6d176ccf918828a6c23356d5df964bc510c3acbe2eb278bff3318e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143893 Malicious code in javascript-triton-babel-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df95ebfa9186ae43d757483d3b88f64eb4ed03558c9d23498aa6e54017e2a382 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139739 Malicious code in auth0-betelgeuse-phoebe-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 954a27b30c79b494f8bac523fb12cfefbcc5d58ba134a3f342680d5e53619d08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147524 Malicious code in rollup-plugin-version-mini-css-extract-plugin-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32e3535c552ac62bb6f7fd42e81af5b0e1f6a4b00c9cd58eb684860eb9003e0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...