MAL-2025-143607 Malicious code in ini-sirius-ursa-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c66192a4c2d85e47773b11e7fb2e2aa20818e70a0701268640be7ec5ad95c09e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139737 Malicious code in auth0-bellatrix-flare-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5e8fb78cbfe2b9703119843bcf9dc9fed3a416b3af62cc1f848ee7ed6c007a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139274 Malicious code in aldebaran-elektra-alphard-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b7d22533d420b889973435226c3b0b684966479192d793f2fd1b62ba75ad695 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145486 Malicious code in nightwatch-shelljs-optimize-css-assets-webpack-plugin-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9188b5e4608aca9ab9241332c97595f1497acd8c7a5c7f5ed46cfc93609c0208 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141645 Malicious code in dione-leda-meissa-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cdd7424b138fa68f71572d8066f481860e9136ef3c9711080a68be656b53719 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146526 Malicious code in prettier-xanthus-mira-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c84a4a84f5c6957d09542a7fbcfa103162352aa4cb119d5508f2321327c232bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in firebase-webpack-semantic-release-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b30c4a5f5b373e1253fbc5568dde92c8b9d95968be5db1fc0c7cd27e209803af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145292 Malicious code in native-phoenix-antares-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 956a174c13c0490bf7e9a7ef5873ebdf96a8566deabda32f029f8357f56acc94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147978 Malicious code in sirius-spawn-chromedriver-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dc5d124420e86b1c5400344bb1baaefbf2c44048bd0b668422e414bac3499a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141014 Malicious code in concurrently-standard-bellatrix-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff872f994bfa9e09bcac8fa5dae43c126048766989a5501ddd911c41cc1fcaba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148527 Malicious code in terser-mdx-barnard-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96e936f8272f0b58889aeda20875ae5a6f79498e3a9da9280a2fb5b686cb6e79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145155 Malicious code in mongoose-javascript-cosmiconfig-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0460219f1419054f30e265dadd5b11cfe5e7dd6e47ccaa607a01958dc356c40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141148 Malicious code in corvus-corvus-atlas-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc931c001a969e7ec61a962f459ddf810a83bfaaf634d60d45f190c942681170 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147029 Malicious code in rate-limiter-ariel-slides-reveal-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79ebce7dd4a32781d94b11798bea39890801057ff66aa44dfcd434474655649d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kinetic-exec-spectron-webdriver-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7effbcd1496d9a2517931b273a2bd6b3fe910ed3cc3d39cb648b766711de01d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148626 Malicious code in tethys-nova-changelog-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a91cd76444f1127ad2a02cdb347e60a363ca07cf1a9ab39ddef4716deb7014a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144953 Malicious code in middleware-electron-builder-arcturus-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc0a89d2d72c450e8537ac1c28fde5acfb85995789697e16a6b4793a011ce5c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139245 Malicious code in aether-vulcan-nightwatch-release-it (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81184e70ff47e3120c3a33be222f6fd072ba6b272cbaa3a37f782fa9b7107289 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148787 Malicious code in transport-dynamo-hyperion-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e02a9b6950f1c0062ca81f751201a1d3e82b793e604f56bfe93c574fe06b780 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139661 Malicious code in atlas-terser-webpack-plugin-auth-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4489eef115661ed272d059faf900d257bc44ad702df52cb77224721e10282c6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...