MAL-2025-148223 Malicious code in sqlite-configstore-remark-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06dda14679a98ebec10e2ad050d79ebedfb942dea17c3e772d9a36b935b88b2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140742 Malicious code in charon-yildun-io-chariklo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d69188dbff2a3d9d5fda5e3ec66c33f9b5431c4a8271d1fb7ccb64cbe4bd7d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149822 Malicious code in yildun-rehype-javascript-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd7450993f2ee006c4a6d5bd8bc981fba7295d59c3471a8aabaecaeb1fe49589 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144385 Malicious code in library-prettier-stylelint-semantic-release-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 048a235ece038bdbb37f29922f586e5674b5501de5239c0a7b67a15de6fa8713 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149142 Malicious code in version-mongoose-cors-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2279c51867e3bcfa98c896e4759ccbe31ff9fb080811277a35107fc44962b9d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144213 Malicious code in kronos-apollo-changelog-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79df635064750b12fad3f8cd2dad32e8df6e3422782ac162ad599d7e8a5a5c1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143245 Malicious code in helmet-blaze-eridanus-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a23f280c4969fd442a925326b4a70a71af391c3ca923f2f2784d2aeaec842b23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143433 Malicious code in husky-xml-kastra-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7f9c2bf1b1dde395f39bfb95800a0f14b8fd95f06ea2bbcea41cf3fddbcc839 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146173 Malicious code in phoebe-publish-gemini-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c346999cc24172ed14d568998d9240bf3ca1888626c6c643f1881bc8aba87b96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144309 Malicious code in less-cross-env-enif-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f51f4bd1b642b2fde0f784e6728bc41be9488dea6352aa752a2e1ccd2f2f7e76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144321 Malicious code in less-loader-hercules-phoenix-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2202e59bc8b6eb663179fec4b52bcb54fe06b2a33c3a4cf3344a08f559886c6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140675 Malicious code in changelog-optimize-css-assets-webpack-plugin-leda-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a5f4f0a1427e61d0122916e6836552a05180e8e2081f271cac87516f12674bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141759 Malicious code in dotenv-safe-lynx-ursa-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ef6b9e2958f19ca89796a67d8034d818d1ed8d5a1a1807f5eaa07c7468a92e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147434 Malicious code in rigel-magellan-dotenv-parse-variables-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe093cac103df96e3cf63a8bdf1cd5e9699d5cab258f8a183b4539d9dfcf564e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143230 Malicious code in helios-europa-soap-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4467f1cce390ba3c5144631bd0d5d727f271666690fb351ccdf4f3dfce29e96d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147358 Malicious code in rest-nextjs-pegasus-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2395e16f16fd91bb12bb0f7ecc86de9d718432c37009b24b2167bd90ad6e98e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146347 Malicious code in polaris-inquirer-hexo-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aff789d9b33a4b8d655fffdf0ed25e9131f4504fd6990c2728d6ae90c17491c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139745 Malicious code in auth0-europa-weywot-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84449bd96a5112c0e2b1d90775d6c79d8c3ae116dadf5caa01e15f9903bdd3da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146259 Malicious code in pipe-await-got-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a40e789ccbb5f530142799e6b4432dd8fbdcb5229c1554268b72c421195642d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145077 Malicious code in mocha-geckodriver-lint-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84c1c9512158808bf67bb2fec6b55841817afc76f0e0dda0e78ea73460944525 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...