MAL-2025-147358 Malicious code in rest-nextjs-pegasus-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2395e16f16fd91bb12bb0f7ecc86de9d718432c37009b24b2167bd90ad6e98e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143072 Malicious code in grunt-public-yonder-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 920769a89fcb827d5b2c803bc75e9e94bde3109b923acbc4292bccfb706cb4d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143230 Malicious code in helios-europa-soap-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4467f1cce390ba3c5144631bd0d5d727f271666690fb351ccdf4f3dfce29e96d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140675 Malicious code in changelog-optimize-css-assets-webpack-plugin-leda-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a5f4f0a1427e61d0122916e6836552a05180e8e2081f271cac87516f12674bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145953 Malicious code in parcel-carpo-cypress-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51611f11cebf50b4cdacfccdd2e1979e08f8252c810d6cd9c4f167da72720ba9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144048 Malicious code in jupiter-arcturus-heka-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc3189c19091c06f152dcaf7051af04de730e644743c984bf3c5753b06b2ee2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146888 Malicious code in pyxis-quark-io-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 541b8ef8907a8039f45e30e9d1f5dd19105a31f1c5741ffb0a9e4077fb2da0fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145096 Malicious code in mocha-zenobia-prettier-stylelint-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d133a6b4bd45306ff647fdcc00f753ec4fe8e79a19333449c9a28ba453f1ba85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rest-metalsmith-phoebe-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f8177a5231f64f91ad462497824a507ac608aa02801a73de1d55a927c0e339d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146910 Malicious code in quantum-mysql-schema-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa1540831b0f95580f1e8db066bb4dfe5d00d24bd0b84256d15212a601e95c79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148762 Malicious code in transform-dorado-phoenix-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c8c06dcd35b1cd056dad87509186667ba2544e0b69410c71587604ce328274f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147601 Malicious code in sagitta-koa-io-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4851a6afc2d0560423e4f641238690dd6144607978993a528fbaa40438934d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149295 Malicious code in wasat-mui-sadr-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0f3d8a941c3cd94b52f529a2a61733938e427dfadb021a5552b6cdffe5d6a31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147747 Malicious code in scripts-semantic-release-galaxy-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dc373eff89a8346915f7e86bdbe978bb844ddf27580d6e384ee21fd6bf5e29d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149822 Malicious code in yildun-rehype-javascript-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd7450993f2ee006c4a6d5bd8bc981fba7295d59c3471a8aabaecaeb1fe49589 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pipe-phenomic-zenith-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3484da591110f315d8c1e498f215420eaa5191a3c0274c31ef6498f72a4d239a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146026 Malicious code in pegasus-envconfig-wasat-supervisor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bb3c8a932b15d91dfb13038e031e46cecbe14cba78be0527c74a12a035d982c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147425 Malicious code in reveal-md-query-gemini-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bca14348c26ccfabf91c669c1372240b7bca296b2bdd6003bdcdffc57a236249 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147148 Malicious code in regulus-iota-flare-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6a50c96b1287c51a55201d73cdb9ecdc1b3140a6327aae2f01394af233affd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144385 Malicious code in library-prettier-stylelint-semantic-release-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 048a235ece038bdbb37f29922f586e5674b5501de5239c0a7b67a15de6fa8713 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...