MAL-2025-141464 Malicious code in dagda-castor-xo-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 423da8885f6bb0609f244a9e0ff6b0ccfa187e1af076268693e93b0c2bf6a404 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139933 Malicious code in bellatrix-cz-conventional-changelog-firebase-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7adea7e961cad3c42a45809df4c91724c86fb260d0a3f89b21880d783a5a939e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142609 Malicious code in fornax-bulma-css-minimizer-webpack-plugin-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae0da98e288028234148488a2f636cdb4fc065991d201ef07a51cd9f0f2ae7f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144257 Malicious code in leda-async-nodejs-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 919099f39c4c627753c0eacb2c31a393a6a92e02b8a16c383406fc50a41281d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142503 Malicious code in firebase-meissa-loopback-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88272abc19fe27fd8fe14abf6c2687fd476bd7824effb94ab1db41c7704d3038 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143240 Malicious code in helios-quito-chai-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a98afb88dc9b089218583ab017deaeef6d3a9daa28b51136783fe9a8fda4142 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143344 Malicious code in hexo-json-auth-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8176ed21787b8042b7644509435dd8c82624164ccede2ee2697b1634227e21ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146159 Malicious code in phoebe-mensa-commitizen-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3272fe5c8f9808cd0044a08766a3758f1bfb12cf816ba23e044287cfd572e3a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147582 Malicious code in sagitta-browserify-zephyr-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd36dba1a904be5cf2cd8b0152ea4208241db504429bc5d6446aa4d5866ffc65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148655 Malicious code in thuban-link-bootstrap-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 733981bb19ff12b4cfcabe59bf6a8a94808fb30163e1dc15d296f1c523f55cc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140754 Malicious code in child-process-prettier-stylelint-draco-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dea45ccf54817bfe9ee066a4fe4e3c2af6be163030e91e326a052c31613b861d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144024 Malicious code in juno-elektra-tethys-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccd6a416be129d48542f77dac831defe147dcb7b21c8048a07c1b70bcabd3b76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149539 Malicious code in wolf-antares-uninstall-impulse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f37908e13e3b9b904f0430d7825adc9afec6ae30f58f69e0aea1614bfaa2d854 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143381 Malicious code in hugo-chalk-rigel-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33fbcc8a6d77546d8df2d30d0a77c57dca8e17f043376af5bbc204b5e38bbc3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147483 Malicious code in rocket-tethys-restart-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23fb6d06018e5315d30aaae3b2d3c6c06487823b3b397fad9d653b0f07b07d2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139967 Malicious code in betelgeuse-aquarius-sirius-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f07e412e513ac365bad2e9f801d69d619cf61540fe79e8be6ab198c3492d5cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146068 Malicious code in perseus-auriga-scripts-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bcb35025ca476a9f8ad561f8791c7d0790e2ba8daca8ed5698af1183e605601 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141961 Malicious code in element-ui-castor-janus-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c8deff50d4c12539320cba70961010bacf4da2cfacb3f5ecc994ecb127833e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145626 Malicious code in non-blocking-subscription-phoebe-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8eee0cdd667f604a05f8c0301d2e65862ab904699dacace146e58ad29881e479 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149643 Malicious code in xenon-build-server-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4772e14eeb46c3faf97d734c19bfc2fa8e6f5721f73eca8f42663e11d1fd880 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...