MAL-2025-142633 Malicious code in fornax-loopback-npm-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b975a5ba0f0c6a4838576be74c94b28470bbf753a132f2a366c7773f2f67dc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145692 Malicious code in npm-taurus-canopus-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d949045a10ffe384f75bc810051fefaa0c8329ba416cf7347aba64b4906bc88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140360 Malicious code in canopus-ini-carpo-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cb5be968ca0d94f6e02b8d6c96a37621dce07de08d5bde7184663b619ec78cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149359 Malicious code in webdriver-mocha-nightwatch-materialize-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6b57024abaa761e941579d15f45be33692fba1760f2c211ca8d954ff023419d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147931 Malicious code in shelljs-ursa-fornax-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54ce1c16c26faee6a4719982db27d0f6c9f0f3d15357bdea35f8156aeb8e2745 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139608 Malicious code in astro-izar-enceladus-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60f5b63fbc2117df1a11a114e5aadfed4eb770749bddd0c8d2a0b2c83a7d4874 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143681 Malicious code in install-release-it-celeste-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01d313480dbdd2fa4b3e74b79097939cc709006077b268b6f7739ebbbb5a559f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147765 Malicious code in sedna-graphql-figures-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8eb47f0ad8eea6799be93d149bf247a1a3f8541ebc3371cc72f9cbb3e8c3d9c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148982 Malicious code in unuk-nightwatch-levels-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88b35f4e13724988b9b8b6e19d6cbd6aa7acf2a8df370570ee8ea0c28c6f065c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148088 Malicious code in solis-spica-optimize-css-assets-webpack-plugin-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5637f81e07aefae739ae5a963b4d9cbd54da3418a84c01616b2d95b5aafe8b39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146382 Malicious code in postcss-chalk-cassini-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cd5f2d5d3d3bf33c23a3ca41571ccc6d77668f774fa2b3c8985024b5ed6051f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146074 Malicious code in perseus-chariklo-webpack-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f539904b019a9a6927140559d0a40efa04b8065a579e3438207e57294f5c867 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147506 Malicious code in rollup-package-duplex-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 821c407ff719dc4afe450356edd924866833272548005ebb50e5b1f4254670c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147299 Malicious code in request-loglevel-luna-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c031d871b37a23d8446c98106ea76b2a0736e3734a7216e261fcd0f02781d40a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147603 Malicious code in sagitta-lint-staged-toml-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fca59636e0d9c48154390c3820e7c28ac94635107dd709d00f284b720b8ab5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148186 Malicious code in spinner-build-castor-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 421b20dd487b367106ab1d674e21d45f7c7271a8b88f3ca452f9b4850cb33f62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149785 Malicious code in yaml-buffer-nova-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c948bc13570472f064550432d3e307a3798f903e96b0772f1a8dd020008063a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143498 Malicious code in hyperion-scorpius-xerxes-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5fcf3ea9fcafd2dcd691e048a33ae8872e48097d9d1a615d8762e7bbaec02d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146497 Malicious code in prettier-plugin-markdown-uninstall-jupiter-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 016a965ba834659af21a9a6e5d253b93b8c12b8879febe52cc900dcf8c2a290a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140306 Malicious code in callback-private-tool-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20450f86f9c85a49f4510f71ea7660274fd84c09b2dce51b607b32f0a59093dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...