MAL-2025-146201 Malicious code in phoenix-markdown-javascript-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 194fdc7c89040402f84c7f588132dda2fde733d422fa806aa30af0599cd5f431 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143280 Malicious code in hercules-electron-builder-testcafe-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 650e1e45c6b0ae8b1cc5389d03c6b74a2449cef944439b01c8b49099f775ddc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139958 Malicious code in bellatrix-spica-rollup-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6ab0d0aa7d82e6b2a28fae89f185a2a5526402ad2a1dbea6452deefbd171093 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141483 Malicious code in dagda-repository-postcss-loader-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b212ae5f985d7c18d311a6ab321a2d2732144636d494c2f7fc71552707ecbcc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bulma-remark-fork-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d37912dda2c1fc048a26c13f8571365845e50058fd84f42956b4a136617b0975 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145691 Malicious code in npm-standard-sagitta-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30e41ca778897239c3e5cf27fd5df06531d908fac9d45d23d17e3169fcf0ca97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143906 Malicious code in jekyll-jasmine-firebase-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cdbb37bda77e42c09b559a883ef4a07bdfb334392fffb8017a7f5a85f82803a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141389 Malicious code in cygnus-zenobia-castor-release-it (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd6fc83f9a9066367039fde3091f84f2dddbde9e9b230041941f6f04b3d02dca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147260 Malicious code in repository-commitlint-config-angular-fetch-xenos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f02b4b6a63c278ba031ef0f782682f26c1ad3881ed1ae82f7aed8dd2ad04e399 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145175 Malicious code in morgan-exec-uninstall-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f584ecc682ea10cbf9660202820033a0cc131524baae86da7bfea15e33d047fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142363 Malicious code in exec-winston-loop-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43316f5983d8aca28f6e31863054b8c78639303e35a1e92460a364c3a9d917ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141033 Malicious code in config-meteor-start-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5f41c156800172217496004b04bf2c1dfd2ae71f2073b0ed785b6ed6984b299 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140185 Malicious code in build-loopback-transform-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 924ddf85d741db918c5a6d6ebd1936d82c9d9258cac2248b333c3e1ff227ed44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148678 Malicious code in titan-fomalhaut-node-config-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 490bf6813567ac10a53b55d8076e06b00264ecb8cb1e85e276c8576f7508bc13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149360 Malicious code in webdriver-mocha-npm-nova-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47c5f0fef0802f17d6acba2e736999a4bbcaa1d25cac8d3897d67847a0380ed1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143170 Malicious code in halley-sync-colors-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a315129aea4bbc0df37718edecba7ea88cb3534b2df5ef52e798db334c6e3d04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146614 Malicious code in procyon-rehype-promise-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a20a079e163dc4dff6bf1a7f99b497723fecc9c4a0f47079f4042c121d0e92a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147665 Malicious code in sass-loader-corvus-kastra-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23f118cb79bf026a1e89581f7c116843c889e90b5bda96cc3d0b56a412403b9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148460 Malicious code in taurus-ariel-zenobia-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15bff887919eed00708f4bd099ec6d4bc2bbaaca712b700c892b5cd91641d159 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139164 Malicious code in acamar-arcturus-procyon-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 430f2f98ef09397343911706356e3ab2a57ef203f1bcd2117eaed211f0369b72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...