MAL-2025-143007 Malicious code in graphql-pegasus-yildun-reveal-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93fd5d8d5ffabf5a6e98ab6f637fc92a3aa9c1bfd88b764248f80be704576bc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147050 Malicious code in react-bootstrap-achernar-procyon-mini-css-extract-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47c1b7077ae1d503d6fa1608613dae97013280d40f52920ea01fd87b77227ec8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144865 Malicious code in mensa-tethys-local-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2701a23daa25c07ca722a238b8a79644ea9150a243c248fffb23841bbcf42f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149041 Malicious code in ursa-apollo-version-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5eb449d68a1a78b9ec331359f8f01997194d27f618af0a73724e5259164277c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149629 Malicious code in xanthus-koa-cross-env-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 873d88c3509404f2988cf91d1771157fbd0b4779809b331cd37a8c05f53e5239 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146171 Malicious code in phoebe-polaris-meissa-phenomic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd489a81b3154b63ac85583fc32ba48fbc9fabb74b26fc0fa19112a7aa3f606c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149517 Malicious code in winston-ophiuchus-configstore-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efca18a04a8da345e7fd1ab9586fdfb34f3f346cf16ea39fb312943602e6a7ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141062 Malicious code in configstore-repository-terser-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f7087c0354c896f95e6cee5f70a1418d0b02eff95f47c89bdc7247d903eb9b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146012 Malicious code in pavo-taurus-miranda-warp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9aac5ead4efc3c11d82c7f4194496e147b4fe85c3b007b970f904232f39c907f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145758 Malicious code in oberon-xanthus-slides-farout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 564241ace50ae8cfeaf5ab8b4c943999f20cb66edf29bb7a2025370de13b0d74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139223 Malicious code in aether-antares-nuxtjs-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ea1a1140aa617b23f10af3e5f342168ca2ffa2f4239a65643f7b7a1a47e3868 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144982 Malicious code in mini-css-extract-plugin-nightwatch-ignite-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd7abf768c17dcc0e5b07309564f07f447feb5c1795b58c7d519912d70485516 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140745 Malicious code in child-process-fornax-ophiuchus-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e62e14ba578f9389f96c9befb8dff2098b3c6d0e1be62aca0d7dfb57d570ef2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142530 Malicious code in flare-koa-version-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 743fef05b826eca569bd55c8b8e63b265ee14b3619c017ffaf94b5c85fd9cbc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140055 Malicious code in blitz-pegasus-convict-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9efd04657104cfac73c4bf700c254831335ec418854cb990760a41449745b98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141994 Malicious code in eleventy-development-tailwindcss-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20f3a4852ec3e422ee14e16b58cd54e7e98cb6c610737ca1b7ac6d743b0b332e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149549 Malicious code in wolf-got-corvus-prettier-stylelint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d5e498c81e00b302004959da9d5dfafb435ea456e7f6d839489ef09f645ffba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139715 Malicious code in auth-atlas-oauth-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cff2e1a60b148d3151b2476f58874193bbcecd8ddd2bfee1f592bde3031ced7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139230 Malicious code in aether-deneb-upgrade-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6f6c00e3e89c4212a8ebfd8666bc2f8983c4e438a26efa2c2358e75f383953a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139373 Malicious code in andromeda-chromedriver-async-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce2b8cba230c4a88157854affde9df2ec485276339955afe9e2c8525d5a40abf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...