MAL-2025-144945 Malicious code in middleware-antares-bulma-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f4a195dc12e34bcddfd2b5e36d9a5c748024e53f940af3a3b5ec6ee8f472a55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148784 Malicious code in transport-docusaurus-markdown-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71956465a4a6b68fe33a350a15f7ba73656070132aa30b36b370922f7dd325ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146671 Malicious code in prompts-nashira-pulsar-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b34b2df3d4a4995a17928a35dfc555917a0dc66c1262a3ba9686778acca2a992 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143226 Malicious code in helios-arcturus-rocket-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc6fb61adc850fdd19f68526676fd00186f6fb9efffd1d06c0d66ab15eaadae4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147982 Malicious code in slides-apollo-cors-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bd8359770a2c125ee7525a313308c85f575a5541bbeb06436ced6fa8aa7ed7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139608 Malicious code in astro-izar-enceladus-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60f5b63fbc2117df1a11a114e5aadfed4eb770749bddd0c8d2a0b2c83a7d4874 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141228 Malicious code in cressida-cygnus-commitlint-config-angular-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1141bebb30cede52e274e8085246ba2bf01af23cc1e83a43047a2bc8e1ad55d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149497 Malicious code in winston-heka-loglevel-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73b653b39fbd93175eb9c58fed17b6c446545000911327d49ec037d7485efa31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146941 Malicious code in quasar-bulma-tethys-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce8e67c18daeeacbb5f975e2833c77be01cc75cd8706f8f443d850d65db26167 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141427 Malicious code in cz-conventional-changelog-private-superagent-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca679e5bef873726be141435454053c2303e09ba8a82603c7836e0ae50b98986 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144181 Malicious code in kinetic-pino-pretty-centauri-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a32af7d0f49e379c176a6e6103f86e25cb05acecb7aad3d0e0bb45637def324e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139887 Malicious code in backend-foundation-prettier-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6ae1b2df0ed35268fefa4fe80a912ce0b5ffe7c7200b7706078f02c9930d888 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141475 Malicious code in dagda-less-loader-public-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab89e3eb545254371daacf9a56dc9363bf5b97df517aec1450925538803cfb6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143471 Malicious code in hyperion-epimetheus-pavo-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b404989c9a1d427012806d7077db62f06671feb52518ff7466c725f691c6259 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145833 Malicious code in ophiuchus-pavo-docusaurus-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99a79c288080b8fddeb7066d7a272b440e104692bf11d0fb31de33667ee13c74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148184 Malicious code in spinner-adonis-jest-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8ce7a252c8fb466cb202f8d2441a363fa351a5ccf8b69a0cfdd48a0238bb6d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142770 Malicious code in gacrux-hermes-mysql-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 968c91bfa918d1b575481a21e04dc8ff86bc84701ba0de6aeff412ae75a289f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146706 Malicious code in proxima-auriga-luna-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fc49a5534846ee216e1649c7299a0fb3a5fa939dbe2741ab3b04cb4e71e15b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146093 Malicious code in perseus-less-loader-arcturus-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6e1072bcbf34a26a737492c8f7efbbd727ffc3bcc97fd86acda93abc6b9608d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143551 Malicious code in impulse-protractor-registry-reveal-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc758536957a4caa16d0eefa107b1b83f74c68889d645806646193e06f5913f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...