MAL-2025-145124 Malicious code in mongodb-cz-conventional-changelog-ora-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb147bfe801c54e943c3b384907f9f9185d5f7082e95835e37acd74d015cfb86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140731 Malicious code in charon-puppeteer-eclipse-draco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d4dd5f4eabd9a3a7dbdd1b6c3808038d29ae76d949ae2e15e50502ade7eed08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141170 Malicious code in corvus-wezen-airbnb-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6625e439e124c01a9f05e73f792b5c19bce9c32a4010cc52be079d4af8f503ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144701 Malicious code in markdown-pdf-ora-despina-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a575f4f0b31402aad3a9359cc6ccbee516874d462e15dfba45ffd8d8e186130e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144941 Malicious code in meteor-webpack-europa-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee921d1f9831f91035c7dbe2911c648fcdf6acf240c53f48a9d2d4cd082facbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141034 Malicious code in config-ophiuchus-karma-centaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d49e03ca3f0551cdfc4df212ad67733536d96af6b3b3ed4f34855c841d85f0fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145797 Malicious code in odin-loop-orbit-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25bc0f20bd252abf7728a486e9acb87f99bbda43e9c78c910ffc2f1640431f9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146742 Malicious code in proxima-soap-nuxtjs-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfef6f6fc5dc73022bb710eebac77b0e7019e7bc797f9aa9f8c2716a3683d588 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142841 Malicious code in gatsby-enif-auth0-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 427ed232764f2b67603cc11f0ccc8394657761c9f9c9f6a180ba3a03053e8411 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146624 Malicious code in procyon-wezen-europa-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 487233a3540f52151026a645f3a2bbe4476b8881847bee5cbf1523d913320717 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148840 Malicious code in typeorm-comet-carpo-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3105ee9bb6ac739ae73518d846f54ac4063dc0314d1af323b3ed40306377a498 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140641 Malicious code in chalk-gulp-helmet-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e819892ef4c38110723e1c2772e4b9b3e9b6d1168ce269f008df5ec18f81a7cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141977 Malicious code in element-ui-pino-pretty-miranda-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b50277e8503056daf632dee3b6f8e95f0bd81b20434b0d5b3fdc14f87eeb96cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149398 Malicious code in webpack-global-concurrently-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdc4d40ec759a4e6c86bad215d30af7b6fa532b1f94d9c6b5a1f231629fcb47c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pipe-jabbah-prettier-stylelint-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15c51329d43e43655bbdb59a03c24e3aa44dff574c959f7d88755860d0c77f3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sqlite-loopback-iota-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3537583281260542aec1d181c825c2b58be90fd7d1ec1ec19952d1f37150fe2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in materialize-express-pipe-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39da7e4b1d7e60ee0615d87ce284dd64e6b3589d46b59a2f04f438ece588486e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in warp-dotenv-safe-rehype-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector addc140cd2fda05d0c1a19dd41ec925eed3dea970a116c3154598788e35e8ae2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sass-loader-npm-markdownlint-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b1e0b027e56351afbf80c9ab89adff2cc97f7015039fa94d51d52ee841ab331 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in luna-toml-bunyan-csrf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02fe946e206d502c4d09eed806309f7229c9b311914a265613e10f8166142950 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...