MAL-2025-142791 Malicious code in galaxy-materialize-morgan-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01266a13930e2fd4fb31b7403bd93427563c148b3eeb6de69a97234b2cc97101 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140191 Malicious code in build-sails-postgres-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ccda79e5a6605a50c4985137b86b3c5988dc6f909bec3f1e70b2c7595ce24df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142378 Malicious code in express-grunt-transport-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1983442e552e785211f2494e7a99bd6132c23f905079524cf38ed39132e26167 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148130 Malicious code in spectron-webdriver-galaxy-avior-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 317bb9278d2a73a86218487b9450e0f1ae0dc5d4285a554b8aab31464d25d0f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146815 Malicious code in publish-spectron-europa-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 109c0af3a14167896afac3e991da3b3f5fc640bdb673e433085122320a2f2b50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148783 Malicious code in transport-cypress-delphinus-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17eccad331b7bf36c8662f97af8938cf65348ccc3a67e2274b6676b36bda5205 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143846 Malicious code in jasmine-bulma-janus-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 378d5568b728345b170c22d3c4ce9c4d7d79cd2eef452efe9948ea118b875b29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148639 Malicious code in thuban-acamar-geckodriver-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2efe942c0be1e5d266bb42a397eec4438ab5d17f13940591bdfcc69cc152a4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146117 Malicious code in perseus-spectron-dione-octans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e15fab69ae105e30fba7e3a24c1bc57c283d108f92197936c36532b038d9c71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147446 Malicious code in rimraf-carpo-eleventy-supervisor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a305a7e1a5fdd412809153cc81b7c65e5acaa9f0851fbe9d306ff17e64c9098 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149349 Malicious code in webdriver-mocha-grus-zenobia-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d15f7a9cdf7fc488f0521552c98a014b1654221c8d0232d763a1a6eb14445b38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141483 Malicious code in dagda-repository-postcss-loader-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b212ae5f985d7c18d311a6ab321a2d2732144636d494c2f7fc71552707ecbcc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145594 Malicious code in nodemon-scorpius-ignite-development (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1ef700f7d6a2075e1da4dbf66fee58b1e0dc67dbe69aa622fa2019ecbd4b2e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147698 Malicious code in schema-semantic-release-andromeda-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ce88cb97bfc01a7e523bca9e01648fdfffd90883d6f47bed44e84981cbe7afd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148585 Malicious code in test-umbriel-morgan-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac7e38a95ac3fab8b1f25744bf8b720b6a5394219e6eba2b3e7a7456205abd0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146555 Malicious code in process-jsonp-build-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c952c1fa34bfc6b5000796239edef4fc37cdec5ac23e9f43e9415eb5d6ec65cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145656 Malicious code in nova-css-minimizer-webpack-plugin-prettier-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7283a8213789ed347d62c1e73d10821e6eaaff86e044150ea8b56f0c99867860 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147972 Malicious code in sirius-repository-yaml-oberon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95beddb139e3952dd262d123f7bac8e6fb2dcd0a25b82d6eea52b3c55bacdb52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140184 Malicious code in build-figures-module-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ace4a46ede4b2472a3a7452145025518e5fa58a5d553c0f4d1cae8f61157b08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147216 Malicious code in release-it-apollo-cypress-oberon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ecddcbbf0f8099a1e391649b9d7c16f1ea8c65a436a1d4c333e454880358d06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...