MAL-2025-145341 Malicious code in nebula-electron-perseus-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b734dc842f23482e428352f82b5484e7d8a438f991e4dfad21d847ca8ed5262 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141440 Malicious code in dactyl-flare-galaxy-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf46e48e76d6587396a1177789bec4bdc75522c87f71b961f23e88989f9223e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142587 Malicious code in fork-eslint-plugin-procyon-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bf6096faa5e10b2c385f98c2600967ae8fad4414fce255c69a7c8ae1ad0d863 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145656 Malicious code in nova-css-minimizer-webpack-plugin-prettier-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7283a8213789ed347d62c1e73d10821e6eaaff86e044150ea8b56f0c99867860 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143535 Malicious code in impulse-altair-iota-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2056dba80ee8df5658105d10c67b95955e906d071add42ba602fa04c45a127af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149442 Malicious code in weywot-less-loader-grunt-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cb982d6776874e40aa7709ce42d3645a50c6612d45d9a0a2c46a365ca6620f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146201 Malicious code in phoenix-markdown-javascript-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 194fdc7c89040402f84c7f588132dda2fde733d422fa806aa30af0599cd5f431 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148398 Malicious code in supervisor-pegasus-odin-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5eafa0494d823d7d10a713b9c3cde8e4e9386a1dd4780a78567fbe9315140e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147698 Malicious code in schema-semantic-release-andromeda-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ce88cb97bfc01a7e523bca9e01648fdfffd90883d6f47bed44e84981cbe7afd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142302 Malicious code in europa-xerxes-zenobia-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be76406359009b1618def7488ec5ffaeed01ec585e4adda18e5470a73c35f24d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149721 Malicious code in xerxes-taurus-prettier-stylelint-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d7c82516605ade34ff31a1afd6d028c24b9db892f1c0ea2e581b868bd8edc48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149349 Malicious code in webdriver-mocha-grus-zenobia-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d15f7a9cdf7fc488f0521552c98a014b1654221c8d0232d763a1a6eb14445b38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140191 Malicious code in build-sails-postgres-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ccda79e5a6605a50c4985137b86b3c5988dc6f909bec3f1e70b2c7595ce24df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142721 Malicious code in fusion-aquarius-mui-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc5a48949c69a045ee791279a04c56a2f449b7a11d0948500b5f1c1dedefea70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147977 Malicious code in sirius-sedna-sass-loader-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5b0424ecff4b8401ec52079df0e74a63b387aa5a0c62be3599366ce04f1b57d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145469 Malicious code in nightwatch-gulp-rest-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 327fab4954a2a66876cb99b184626eee80b3bd5d099d27ccbf42a0ea7cb4cdf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in straightforward-teal-krill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d98503d80c01ea0a5a4cdd78cb2cd4083aa90bec31a808b15c95f75be1ce50f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in amateur-pink-cattle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb0074ca7da84079367f873009592e2d0463a76bfc1601b654276cde150ac537 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magnetic-harlequin-amphibian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3239eb44761b91922ceb09cee8fc6b5c2b5dccd80ca8946f3686cfffc8be2df8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mature-magenta-impala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1de26faa67ad04b9425d716aec4c78ec2e19bea135d36c63fba463a0075d6c1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...