MAL-2025-145113 Malicious code in module-polaris-dactyl-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8a72463d4d1200e3476f7c45575a7a197213739bf5954a2109210a8d2d91f40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147279 Malicious code in repository-phoenix-altair-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56358002f8c5f94fc9121e5c7eed6f83e3b6ae720afe694721b04db71840074b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145493 Malicious code in nightwatch-ursa-centaurus-pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c19b305f14370fe36dcec295ccbe9b4d060fc0c026b5114107f721facbbccc5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146836 Malicious code in pulsar-mongoose-aquarius-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ae9710894ce0012d79cfdc2c12a28b1400235171405e4b2701bd3b7165aeee2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142791 Malicious code in galaxy-materialize-morgan-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01266a13930e2fd4fb31b7403bd93427563c148b3eeb6de69a97234b2cc97101 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139560 Malicious code in aquarius-webpack-apollo-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aa3d71e1d7a0e15bb88b0ed383e56df383ddcdda804b23c3df1115b266cab90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140145 Malicious code in browserify-update-publish-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f24bb06a9bd2ef47ffef67f44536c0d250ec84117202527337d00c75f442ad4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148387 Malicious code in superagent-vuetify-antares-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10a3e180e9f01360ae15a1ed1c0c54fcd8e78edcbc812170d9b376d7923c62c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147540 Malicious code in run-script-changelog-publish-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90543340762c3dc3a715829b13e8c3f5016889801d840eba6365aa107803080b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141949 Malicious code in elektra-link-postcss-loader-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e674a4cddae90ffa7220f43af1d7218a93cd063c9a449faa4714fed4383dbcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148396 Malicious code in supervisor-lynx-enif-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7927318322d4ebf3f391128c73ec470be85f97f9dba951ef1ddef5ce9461eda1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144759 Malicious code in mdx-ariel-stream-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f35523ae7e04b5f355668214340036ba014f4224743b24d68087288025b843f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145175 Malicious code in morgan-exec-uninstall-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f584ecc682ea10cbf9660202820033a0cc131524baae86da7bfea15e33d047fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144177 Malicious code in kinetic-mini-css-extract-plugin-winston-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a22880454f6c3b89cc13ee3e15c29aca4689483d59fc2695a5b325d74267ae4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141045 Malicious code in configstore-apollo-mira-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53f886345bbcfc473d8d3b4a18ff79cbd8439b3bac331f5bdacfb2166336a495 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144766 Malicious code in mdx-gemini-miranda-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f28fccc481744cd6741ba11920c2b73942570a19cfb4e00807f6b56f3a72266 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriver-mocha-mini-css-extract-plugin-acamar-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53af958770f4ad50cb7b1fa86e408b7c65cf53d5d6044488bb5a3d18fcca5da5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142840 Malicious code in gatsby-enceladus-kronos-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b68d822e0f178a168888b871b773b6a40775cee41b6b188fba2c28c120c58f02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147349 Malicious code in rest-grunt-gatsby-impulse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65af85a9b14891de6552ebba028cff66951e27bfb7ad69e55bbbb050e2926389 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145853 Malicious code in ophiuchus-yildun-centauri-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfef0efd2ab36909c134870761c4a8cc9e6ade31076e09fbccc65c28fef81b5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...