MAL-2025-148010 Malicious code in slidev-nestjs-jekyll-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fa9b75a2d8edb5a8c369a000f920617aadcc6109b2c759632c6965551d4a997 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146218 Malicious code in pino-foundation-norma-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49315bb63638761a8dbd289a4cf8e22369803d71be237d59224742f28f2b071c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143620 Malicious code in init-europa-cressida-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fdb0eb88f74e2971fab435463c2674b6f456a682d7e46e08e6eb43e1dc34d2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141124 Malicious code in cors-ganymede-charon-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee86ca30bcc45566802cc10a865760b2d98563b06c250bedde4d30bb7e523d48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140050 Malicious code in blitz-lint-odin-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2759da427a8c26f4ae71507e7ef49ed76673f5659515b142159661b256b8ee52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148656 Malicious code in thuban-meissa-envconfig-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59f0f6cece6fd5f5c781801d368a2f9c8378b13cfee5c710de8b83ff681d52e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143479 Malicious code in hyperion-iota-hyperion-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d98c520b0171c46afb33078873f06fd90640fa07e9795e8262bd23f12c992a6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140511 Malicious code in celeste-juno-restart-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e323730ed431ba0402402ddebb72abbf45522ea92c6910ada2bf7ebe2a01509 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139732 Malicious code in auth-thuban-despina-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 994aae1a5bffc21ac6c1e7d02d8aee1f9f9b02e29f12defd7293fa63c496981c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147835 Malicious code in semantic-release-rimraf-polaris-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4450723988fdc9934497f256eda5cf0448f684ee13edc2559145f61689bf8886 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144243 Malicious code in lacerta-hyperion-cors-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d9832123a085550ecf3b72f0ef1e00f4cde4b0f3289e6500118e6db913e8a61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146396 Malicious code in postcss-loader-galaxy-kaus-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f5605ce3f0a50e3f5b0c6a7049fc8fd2af1a76c911b137becc0bba57bb16761 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148072 Malicious code in solis-cosmos-commitlint-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e2fc1a99145847686612ce007cfb470469dc5dfc4e44c704c39abe06ffaf80a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146599 Malicious code in procyon-jest-ursa-rehype (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e4e8c378c417792e988304c30b5864031de74fd0ddc5df3e53b06dd10f97124 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147457 Malicious code in rimraf-pegasus-blaze-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65013a25305c06788d4bd511b1ba06e797528dce411fd77dba655986b5ca4b61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140506 Malicious code in celeste-forever-bootstrap-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2664a9a6197e54174e920e47bfe1732ec24d3916eb0c990bf54ccfbe187e4e9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140151 Malicious code in buffer-airbnb-rollup-plugin-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 018f16aba922389dbda464f65913f52e8ab368a0365fa9de3966b886be30041c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149722 Malicious code in xerxes-testcafe-sqlite-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e45bdaf5ea929a3a996d1e89e1f31880f504fe467aa313d14ea669a2d3d985a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142727 Malicious code in fusion-callisto-parcel-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78094ec84b44c653fb466d59da99ced3eb3102b8ca8e13b0bef3f006f795826d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140310 Malicious code in callback-request-server-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32582146213f4e818a6adcaf53f077494be4fe9e9cd59bd6c4429b5d32381c8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...