MAL-2025-141352 Malicious code in csv-ora-relay-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b21441c8f78c5afc7820cf0a2d79eb3499fa1781bc2b779d68a7a46288bf644 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139259 Malicious code in airbnb-node-sass-kastra-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03389f3a7bdd7c333dc10a664884142a887b5dfa396f74e0d333e8b182335600 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144453 Malicious code in lint-staged-despina-async-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e7945446fa469f4ab212c7c15865d5e21bc2ebbaf53d61f9368e81a8b86fbad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149493 Malicious code in winston-farout-heka-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51ed0798bc65f6397f3a98555c061206cd8d29c3eb7dfabae22c56a5d8d034c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149129 Malicious code in version-achernar-nightwatch-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9642aa3daebd57c9b6eab0edb71eb31b68b0c1922c4f298ed95d98b9da1aef15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146853 Malicious code in puppeteer-ganymede-hermes-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8e3398eec782d88542539c931720b191039bca6ee9204f7b0908fff31927037 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141323 Malicious code in css-minimizer-webpack-plugin-command-hyperion-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f156f21864fd5b1dc51c70fb2bd714c8d2745fd6f37bd8a9eed2f326714484f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143884 Malicious code in javascript-nodejs-lint-staged-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 950a7016236c5fc899c18a2afba5edad822d00009aafafb79a9a52e55dd8a106 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149528 Malicious code in winston-sqlite-typeorm-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0583ba8d9067af98e95c066865b38f493fe46011683758f8afbd70d2cea4b9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147346 Malicious code in rest-eris-norma-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bbf62dbc0285b74b3bcefcc881a1cd6aae2fdae5f5a5027a8f2028f804ce385 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147978 Malicious code in sirius-spawn-chromedriver-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dc5d124420e86b1c5400344bb1baaefbf2c44048bd0b668422e414bac3499a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145593 Malicious code in nodemon-rollup-dactyl-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2b432f0b0c2f9f89aea56397185205c9ac09c7aba0ad4d26bb0190b556c801b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142678 Malicious code in framework-dactyl-exec-development (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e093d0cc7d469c010330f2fae3ee59791663210739ce726a1470a5457e8ad63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146090 Malicious code in perseus-jupiter-got-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c953cd749ca2baddd8a485ccd923306d0e09b1eb89a98f5aeb1aa424be888e54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149561 Malicious code in wolf-sadr-venus-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5820b02f0067ae5b03cd0c76651fda8b7b47018dcf73f12959a8d003d8a8622 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144777 Malicious code in mdx-sadr-chai-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddb09f5e2a7704baa6438a141cf28d13bca7213b991283293d34302c18bb1c7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140059 Malicious code in blitz-regulus-phoebe-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c368bd40559bad0ddf703829fa576b4ca7c291b37720efd08a9211e177fc52d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139872 Malicious code in babel-rehype-mini-css-extract-plugin-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a1fc500675fae07b9a876c104374b27b82820a5d8bcfaad02b275aa0426a718 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143789 Malicious code in jabbah-release-it-enceladus-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58ba66041401f9fbf53f8c5df1da308bcaecccb8d8b4546cbfbc2b5d9a4fec37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143360 Malicious code in html-webpack-plugin-epimetheus-async-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40fb35774bf18006575735aea11ab5c4dcb09ac172c921835ee6157fbd4dccbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...