MAL-2025-141157 Malicious code in corvus-levels-winston-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf00a98772a23d0acdf2e0f571ae86e7537587f184063460e54cbff80f48f446 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140249 Malicious code in bunyan-nestjs-gravity-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a2945766e719b272c5befa7d59051355b159245ccff670eefbedbfc435046b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146058 Malicious code in pegasus-taurus-elektra-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47eeeb958685c9d3133a829146a4b09d0b620b5aa61fa60fb7ba91509256119e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143781 Malicious code in jabbah-leda-install-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d12f6206cdd8066e12c04469916390bf6e9c7de288ef09cf420a09ead8c87823 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145346 Malicious code in nebula-mdx-polaris-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b597abbb8f843368a4693e7ff646c15e6d201318b0ac904a36d5fd327456cd0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140178 Malicious code in buffer-virgo-eslint-plugin-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a9404d1108d6ebae69e8398bde30e94e093d70c651f9acbb8f4610383a52ec0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139252 Malicious code in airbnb-colors-sync-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7fc7d0428c018b9d34e73281aa3acd0df3ba2771cef2f568249f03b9b919a9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144934 Malicious code in meteor-sedna-markdownlint-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b24b23272bb9a9b6fe57ada512032b74918ee0417d5834f858230c532e1bc667 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141816 Malicious code in duplex-octans-proxima-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63b3bf319b92e4a0abaaa40adf046cf088a33ab1547bfe298f363a01dbf049a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149229 Malicious code in vulcan-eleventy-nextjs-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40bf00e6e59003b2eee638863617e1fdecdcf2087ea1e8912068b9f523a30e8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140908 Malicious code in command-io-gravity-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b85d428b46a5347f6003a5b341f4bdacf76a07ecde08559de977319a4130e910 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141611 Malicious code in despina-winston-optimize-css-assets-webpack-plugin-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0e0f37ee094b8b166260740fe127d4299bc7ca81d422620f1610734025e8e2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145785 Malicious code in octans-venus-fetch-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7185ffd095e4f4b31889ffa376123541f96ad34c8939f74a4f4ab17f5905aea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144248 Malicious code in lacerta-mutation-lyra-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e1a8778a9919d1bf804f1ffc224052d3b82fa960b4e13abb3c34bc2b1c21a4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139660 Malicious code in atlas-terser-uglify-js-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72bca524c147bbb2c84bb99e0bf53400154dfe38d61b8b5fe6311f40c3c42645 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145019 Malicious code in miranda-ariel-metalsmith-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0edfbaf3006b6027e406e19e8a4d6215add69e23c09a4540decae8c630303be8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144837 Malicious code in meissa-supervisor-markdown-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a60cdc4d5317b650a261573ff13fe8a451e6e91f68730697fa7045ac908f307e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146017 Malicious code in pegasus-backend-enif-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9e142535251d34119d764a5255f77afd40a8779a049b56f1f864dcd4f0cc9c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gemini-wolf-subscription-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aac34b37db8f5230563ed1d7c9aca5ba4992c6274148ebc27c70174dcc389fa2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cross-env-mongoose-juno-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4ed32850119f2ab08cc8fcad8533e7034e3c689822c26222db357b516b7554c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...