MAL-2025-140136 Malicious code in browserify-node-config-impulse-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1622a7c3fd318e8af35166278adb720713a472b9b5713ac048a0cfb2fcb2107 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142009 Malicious code in eleventy-nodejs-luna-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1486a66135cac5985712266daa0e8bfb7dfb03a6066e19fe907090c033b4000b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149495 Malicious code in winston-got-sagitta-xenon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82463284e6d68558aa7d4c54fff9d4a660f92325d94010f8983fa28b8bed191b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148912 Malicious code in ultra-ultra-castor-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d35811f81f6b4b21d4704872f7403127ba6e87b6a90f1fbfae178489a68c6f86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145708 Malicious code in nuxtjs-init-ora-xenon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b2ab6c5f5d4fd61ff340323ee7b6c92a0edd0cf2bd80b30171d84397e7304d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141073 Malicious code in convict-fork-pyxis-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5812c5fca60d1dc97f84b0717487cf140262af29cecb3162e85e2553eadcf919 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149494 Malicious code in winston-gatsby-zenobia-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4539e20771a5e14a396382185985a89fdd823182f16cf3fe399f24140d7e8c4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142965 Malicious code in google-magellan-config-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca1381d36d49061952c1f910630b1e1936b3bc590e02317d6cfb75526024ba2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141950 Malicious code in elektra-mensa-astro-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1b808128b662930b7d3ba8de884fea5792a6ea694168add9c96af03ff99ff98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141856 Malicious code in eclipse-nightmare-framework-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a93d0c499421d82973f4df93cf56abf3d08dc50da7eed95c154c8b6566c2cc6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140831 Malicious code in cluster-markdownlint-equinox-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56c171761f3cbbf27925b3aaa8a534f93727568b8a0eb9097d587828f151e01f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142907 Malicious code in gemini-nightwatch-janus-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d80540366eb681c89a52dd816b4a254ea23facb053fadf663e40828a96abfb73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140045 Malicious code in blitz-fork-umbra-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7ed6fff075c7c8191f5bb8ca9ceae5566724e352dfc03429d19a8afd34aefc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144795 Malicious code in meissa-bunyan-loop-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa2570039e57cef0e6475a2bb439694e2b71ad50221717be387abd3674716b11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142779 Malicious code in gacrux-proxima-callisto-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01a6f62d0a55ac88d689f127d9213e3148724a57b123c8a23ab4b5625cf08c5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144341 Malicious code in less-non-blocking-run-script-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df8eb2c157e35b8e588e935fc40fe578116e2c12180c063d5ec26c9550c7c6ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146726 Malicious code in proxima-oberon-magellan-uninstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0756d527441ccfc12f2511749f3ee90f35af9639574db1d5831c61e0e56502b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149638 Malicious code in xanthus-stop-antares-carina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24aff18b7ebab6c38ebb608d171a38a0950de81bd26c3a9d4c476745990464a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143850 Malicious code in jasmine-draco-winston-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8ff5a0f28a6222a7d93aa808e220ba1825c5aa59001690edf3821026626b821 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146695 Malicious code in protractor-pm2-cosmiconfig-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b442cd6b7fe699a932768c2d49b7787c6c6819ff639e44e5280a215be7563f90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...