MAL-2025-142994 Malicious code in graphql-altair-antares-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d65a553235b8b5f8dee224e120bd0300ba09dc2e68d4079fe9d9e1f26efa32c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145971 Malicious code in parcel-sedna-react-bootstrap-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae09af36af178a81acf4d4e93bc643df245329f487f8538f7c695e995af2c730 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143412 Malicious code in husky-child-process-lint-staged-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47d03a106828f6507da5ded4d486c87ee74293ac205b21b7d112739c94a367fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142233 Malicious code in eslint-plugin-ignite-carina-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d58af40063be0cd212eab0096cb411052d426f2505714f8cdd21598a657b746 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143878 Malicious code in javascript-dotenv-quasar-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 996a3dae89f9b7e3bb0b73ff7640c83fb95b29c9f700d3dfa3ecbecaa30be33a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143419 Malicious code in husky-global-lint-staged-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f4d5f79c4d1a26757a542e6f25f54750d63a47fed852f3fc6decaf700d2b8cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145919 Malicious code in orbit-xanthus-apollo-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 924c714b8a65d6204a62110d0e88de54f38146b9a5979c8a228f0cbfb5b016e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139724 Malicious code in auth-middleware-phoebe-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e3e51978571ca4dfff349d756ffbe01b1a5025c948ec27206dac4551be7b695 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141200 Malicious code in cosmos-blitz-got-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3cab308e3dfecb0e0f1d7e5a6ac6a093767de259085409cb5e48b1f410f5560 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141863 Malicious code in elara-backend-mira-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28bbbf6df8e21e431ece8617093f35458c5b6baa68563b1514c57a029b5a6a26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148667 Malicious code in thuban-semantic-ui-elektra-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b1da63aec152820d045eb1a524542bd027d82aa0a13ad938501d35379627961 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140884 Malicious code in comet-parcel-gacrux-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e2235f95a543d9f2a243f935f6bb11f97b4eee0e450a4f955c26966cc1f900d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142242 Malicious code in eslint-plugin-spectron-csv-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4186d0899623ecf21329b54ac8cfb81a5c3d55ce143400e9dbe0088a6262051d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144702 Malicious code in markdown-pdf-passport-webdriverio-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d30cf25fea46387169a2ddaa6718fe8741c9040928feaa0d19f700989e189e79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146848 Malicious code in pulsar-zenith-triton-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2308c0086857e94cb94b05a3c706f8f73f30ad6f37c3b5774f0cf69efe612da3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143371 Malicious code in html-webpack-plugin-sedna-css-loader-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e51b8fdb4d679e44dce5f94d31b2b02d247d6d9cadee2a0d6ef9711492a2d56a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143367 Malicious code in html-webpack-plugin-kronos-phoenix-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be073f8cb8485f271913239bfa8cae9973ba43ca51182df57b25b58b8718f62b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145121 Malicious code in mongodb-cosmiconfig-impulse-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16aedde5124299a67704ac06f0b0969657a4ac78522a0130621fa3344d627407 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147158 Malicious code in regulus-spica-passport-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a713fe213ed9bf0e8d60873861b986fa6ae9d86a561fc57c525d5bae053da4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142184 Malicious code in eris-spawn-lynx-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14bca2ce67e69c781a2f7322159d6df5b7e238d726cee97432e040ca27711aaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...