MAL-2025-149887 Malicious code in zephyr-koa-materialize-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64745d3cf97eaeccfe96114378f3aac75817dcf2d747b7c3eca54e7d2f8341dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143893 Malicious code in javascript-triton-babel-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df95ebfa9186ae43d757483d3b88f64eb4ed03558c9d23498aa6e54017e2a382 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141113 Malicious code in cors-aldebaran-aldebaran-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1fbad0e36204591df10ee8666cbe61cee4d9d90e7623bcc6a1c10593e34ea94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149156 Malicious code in virgo-global-superagent-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d8563f28a2a27d7861250bad8476d45d2682ca1232f97b8792980d923d60542 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145605 Malicious code in non-blocking-colors-xml-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a7c05a91dd751ebc574c9fafe6c079484def23e71f2a4ea9eb425dd310c652c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141256 Malicious code in cross-env-gemini-oauth-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a4106c023551a8a784aca23591a676915bef17fdc0b2784ff7bbf6e37865ec7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149497 Malicious code in winston-heka-loglevel-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73b653b39fbd93175eb9c58fed17b6c446545000911327d49ec037d7485efa31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141808 Malicious code in duplex-elara-charon-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 494f2037fcf883fe2bf066df716f3152638b27ffc4349a02c360667bd18cbbf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147227 Malicious code in release-it-nightwatch-jekyll-yildun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5796729233de51edc8c296497cfcabae7b685d63f4f1c6a8c094d2ab4513ade2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148276 Malicious code in start-mongoose-scripts-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9c8881d3331a199f19842e80240df5da41adea1181cadde5924c73d69f70e38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141992 Malicious code in eleventy-callisto-forever-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 447abbef07e2169825384d0a4f6cd21674555dac84ac23aee274c4866a00fc20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146706 Malicious code in proxima-auriga-luna-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fc49a5534846ee216e1649c7299a0fb3a5fa939dbe2741ab3b04cb4e71e15b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148296 Malicious code in stop-ganymede-prettier-plugin-markdown-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdbf03b50094cb4b2dabfc1f9cb2b12fc987c7c284d4239709d51ec7e88df419 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140332 Malicious code in callisto-fornax-yakutsk-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92d4146fe49f7b6256b420a78fcb513ed920fd481edd057f15304dfa337fa61c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140746 Malicious code in child-process-foundation-eclipse-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52c4f59859c4a243e08dd39070370b2f65a3c8c6d979f8032023e0bd0b311b12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146671 Malicious code in prompts-nashira-pulsar-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b34b2df3d4a4995a17928a35dfc555917a0dc66c1262a3ba9686778acca2a992 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145252 Malicious code in mysql-leda-supervisor-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd5b817f89bb35456bfa48a857ce4a8495d2e3544a7f58f70edec8eb1d974d84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148425 Malicious code in sync-jsonp-less-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01ef6cedcae0b8171fc191b67ad90dfebd8ac6e394c7ce662b8e558b22e9d56b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140190 Malicious code in build-readable-react-bootstrap-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e775b6d0ca701f5683b2d7e970cdfefc9a9d539920c94864c59683252009ab1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144264 Malicious code in leda-convict-commitizen-cassini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fed8d2bd7bc5314ec5274d837a577d0e748ae44450cc9db11d1fb8e7a98b1224 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...