MAL-2025-144720 Malicious code in markdownlint-antares-development-nuxtjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 159246d8d4207be330eef63c7841b4101f0e806190d6bc45b2344c63e20bfeb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139227 Malicious code in aether-cache-telesto-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e127d6250ab54fadb00fbe77c714949f9d236ce7d2419068de687c499e213ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auth0-jsonp-promise-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb40a31cd11f675d3723d8b1395719704e6175d0de1759fa6ee4004879d0d6e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pegasus-rigel-bulma-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e10efe745ce9a8c5335e8fc1b7f9fdee45f7376be426c0b9e9774e91939f7c55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146538 Malicious code in private-phoebe-package-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 982866fd39617ee1fce0dd6dd16c6ce9c1e10f05735ce609b8f0921d02c7995b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142719 Malicious code in frontend-wasat-nodejs-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44a9b3e0e6c35f9c2f5cb48630a98942aa550303d2bb87c44fb9193fd5581b34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145269 Malicious code in nashira-commitlint-config-angular-markdownlint-xerxes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f9109b8ff982a9d1497a58c4c02488acb7ebaf1b4704ee722c5231505aa1653 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147763 Malicious code in sedna-despina-pyxis-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d399d73429d9ba27cac764fcba3869ce6e10718127ced0ff53bb89d9614c692 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140483 Malicious code in castor-cypress-figures-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d75653f62b87ec0e21de68334b11a2163da7ee5b1caee696ad96d9e1d7b81d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147008 Malicious code in quito-websockets-aldebaran-oberon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f2c0e4c6679ae7c3900d74f8599fae88292ad7ff7599639ac76f3bdf64e5c77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145222 Malicious code in mutation-foundation-mocha-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4504dd92274555fec52a11e4209f610f222ddd78d1a95312070a220335e6d8d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148988 Malicious code in unuk-vuepress-sagitta-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf436562229ae296fff8ff03e66e905874a0ef00f71b4363677a2245ede05009 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148858 Malicious code in typeorm-superagent-leda-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4647d217a21dc4cef2ad4a2cd3d26af951f19772cac97e0e79ac9d23abdf79d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145861 Malicious code in optimize-css-assets-webpack-plugin-global-titan-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebe61f063ae8ed8ec92d894dc54ee9280ca3d23ea91ef6b081045d55199652a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cassini-cors-postgres-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfb80e0079a5ac1d92ba0fc8b0ff143c34a6cc8cd0cb0106ce662a719d2abf5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cluster-geckodriver-child-process-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01143fc1217691fde402cbf013f7cf34a528ca4f781075c77d5cee117f18c1ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitlint-config-angular-jest-update-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d67ae4ba726fd3e6e3db7749730a7d56351d54d32d08a77f9a7d6ee31dae1d26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in convict-loopback-ganymede-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 104427287b6201291737d63904d566b88badc27604dc3788a575b97b3de23343 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in css-minimizer-webpack-plugin-ursa-hexo-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 638e5940c3692e0184723af4b60b6ab2fc2f47716e729018664d180a463eb807 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-parse-variables-convict-fusion-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ca6eb8631db89303e16034582660ccd74eeb93a6ba715b0bc50d4579f7ee47c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...