MAL-2025-143565 Malicious code in indus-global-library-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cd552bd8faaa141a7acca92b5937a48130fccf430c87326b0d9ebe7fd4dee40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140652 Malicious code in chalk-passport-xo-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c244aa0a095f7a8205087c80d788004f74f73da527c4e42c8759dda5f0d3a93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142934 Malicious code in global-fomalhaut-protractor-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bd11327901ff2b5080328d85f1d8ef235277cd984bf86799e95dadde492694f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139777 Malicious code in avior-neptune-io-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 159acacb064f7f4b882ac1b31bf36ebd3aeb9ab58dd49a8c614929e0aaedb33b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146530 Malicious code in private-cordelia-quark-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e26f958058c92d17ab7bf61a0ab319c24c7571b2f628738bd602034f1e85293a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143816 Malicious code in janus-magellan-quark-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3696fbfcd478350fa5c64c1d68b7c5502ad6df5cf972b8cf3e69c7f0d811eb85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142208 Malicious code in eslint-config-query-cosmiconfig-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3d4f67a49c2f8660c00eb78d5b0cd0ee38842af3b08524b54732d34fb48df93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147439 Malicious code in rigel-radiant-uglify-js-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85630c33cb4c0ec6a482317d825de7dd864dfc1abf5642f7f91212d8139d7c08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143256 Malicious code in helmet-mysql-auriga-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fb083d543cb2b32e10d866fd5f088b1cc67195da82893e307ebea62ffee3a6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142052 Malicious code in enif-less-procyon-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 959dbaf3cd4c9e9429acd747e88f46236bc6f84b85bbd2f3e3c72d8325c55465 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140151 Malicious code in buffer-airbnb-rollup-plugin-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 018f16aba922389dbda464f65913f52e8ab368a0365fa9de3966b886be30041c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149488 Malicious code in winston-dione-playwright-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2acf1752fd78aafaacb9786f57344172402c394a983d209ea714bb25c15b5cfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141080 Malicious code in convict-mocha-castor-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf50b62bf29b274dcb258f4cbd7260d8799e01d06ed3dd44267be145c4590df5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144871 Malicious code in metalsmith-build-cressida-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5013b4dca24d60518ca66a9e686616355a3dfc7e97e90c957bcdd137193aa8da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143938 Malicious code in jest-vortex-ini-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f57921d568b97d6d9305b1a5aa660dc2fc975b01045ac78e3fd2e0b5ed3a82d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144632 Malicious code in magellan-dorado-puppeteer-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f3238269c2f191b403634981c58aa5ffe63bdb37c7dc0633c090a4c8b8d264b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143562 Malicious code in indus-commitlint-config-angular-cross-env-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b24bd98a02c55efc44bd67726c44dd41c85ad6d1522918a7a14153dab3d42d53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146916 Malicious code in quantum-tailwindcss-kastra-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 587b9068c89edbc2f8b21cff50936e1ca4e6130d24272049f5bbaf0ec0f0f50e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145033 Malicious code in miranda-firebase-non-blocking-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c957b2e89a78b2ed4ffc7627c5903a922bb5f6dd009837001276b57045e6a3bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143285 Malicious code in hercules-husky-ariel-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0c80ce18186d959135d9e2f89800afa7cd0d19f58ed2f29fcb81a3ad5114a3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...