MAL-2025-148243 Malicious code in sqlite-transform-luna-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb2e1c0baf148c725b306ad0cdbbc0621ad0c6b25c3f9486da86908af334f598 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145306 Malicious code in nconf-ceres-css-minimizer-webpack-plugin-nuxtjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ef04650962ef0157fb6aa6203575844103e5030f75aa4db08b3f35fb3d4a285 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144829 Malicious code in meissa-process-query-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95ae5fdd1780de97e98dc346d7a17d21adba49ea87d63f32d85c3c2e030b0131 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147874 Malicious code in sequelize-neptune-await-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abc82087e1ae03780085eb9f9224d3323f0d27a4b7a3782ee393c109ab082532 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147667 Malicious code in sass-loader-foundation-jsonp-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4e0350965ae13726f78400cab872791dc3e71479029009fa263dc5231d24251 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143127 Malicious code in halley-airbnb-toml-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a603b9adafc76612cfcb012fe930172074af1ff062c4df5f8bdbf21c25fc845 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polaris-markdown-titan-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35619b085a70cdc1371d350992894e62fa81e502bb384ba06be4c705b98c6742 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in leda-publish-koa-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65c65c1ef134ce232577df13d5b79811447fe487ad8ce6ed524a8d47842e01d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iota-canopus-loopback-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4017d639d7ddeac9ee44aa2eeaa32adcdf3d9a98214a28fde276ae47c03edac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140980 Malicious code in commitlint-equinox-antares-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf9f4821f0ee99f48562646d82f3f69fd8b7ec96aa2acfa28f0dfb34f662d098 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140192 Malicious code in build-socketio-enif-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ad3112923e340d924bbe9b609468fbed79b3805c41fd9f6c46d9810c00ae930 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144477 Malicious code in lint-xo-ceres-mini-css-extract-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daa7e2a9508eacc4043acfb139a17de0eaa316004f37d0113aea6b9de678ee44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146709 Malicious code in proxima-commitlint-config-angular-pyxis-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4de913c34169e8ae4ca886f994f10fbfbfcaf2c7d8b2398a257a5389e21b76c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144330 Malicious code in less-loader-sirius-perseus-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f8179d4fd0c1a7546ad53b8f5e279073c0c9796bf3b0ca8aafd3ec5fbb3ddf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vega-css-loader-json-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9ed9e0c56378cf0db01dbf06e8ed7f5f59821afc593e4fc9501eefb82615d14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147973 Malicious code in sirius-resolvers-pm2-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5b5cbb1e0e4935676cf3ee3d871ea76f06f61c680035426f909d71303cc289f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144976 Malicious code in mini-css-extract-plugin-heka-miranda-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed1fa0070a7b54d9426e52227a9e3f7dc92ed67265f0518bd45fefc50d15b0a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149245 Malicious code in vulcan-mini-css-extract-plugin-commitlint-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fbac709081533786703a9d2c820cc05cc6e037c57d2336727371303e83624a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carina-mdx-xerxes-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd044204a95843e7083af4777aecd655a9d9ac6d2120c78c235ae0164b0c172c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145479 Malicious code in nightwatch-pino-pretty-publish-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2a1c951fc5746b594ffe7ddccf0b1e29860605ad3eed07f5b638f0de0cdecc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...