MAL-2025-140051 Malicious code in blitz-magellan-betelgeuse-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f5f69b47cbf03defc947d8b791ac97a071f76257cf87a5173e97303e7d827ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148413 Malicious code in sync-adonis-rate-limiter-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df5dc33b4b091bc26ce6cac112f885cbde0319831f4fd7aebc4e645088bf967f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142349 Malicious code in exec-less-commitizen-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c99abd01217e56aebbfb133b6b43794511bc65b3e048a0bb58821ba2d7898bb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147693 Malicious code in schema-helmet-ursa-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49175c5ea031d83e1e3035759c33cd0abdb1402d03075dbd7f0e7f7608649df3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145269 Malicious code in nashira-commitlint-config-angular-markdownlint-xerxes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f9109b8ff982a9d1497a58c4c02488acb7ebaf1b4704ee722c5231505aa1653 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rest-colors-xenon-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aea9c8aeb5c94be268f5eb954b7f3da9be1607c0683a980ae34c42e812feb1dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thuban-dotenv-safe-rigel-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ccc363bda7653032d1ec59093033ea188b057325b09bef82a64b31336370d9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spectron-docusaurus-nodejs-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f5ac08c543ac3751fb7a781814ae801d51313d038a0df1a8e71a40a06550122 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142159 Malicious code in eridanus-wezen-module-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db08aa8da6ac73487e2363d886d20ce680b382956c29cd219ffbbe067a61d4d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147067 Malicious code in react-bootstrap-mongodb-phenomic-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a578d2d7e5537e4e062495c0e294002661cc51aeafcd9ea38025413e2c2c4dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148569 Malicious code in test-css-minimizer-webpack-plugin-betelgeuse-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82a458dc1ac56e93a769b5ee12b7dfce2a272d1d772247ce5792ae25d97b27dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148689 Malicious code in titan-oberon-restart-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80f54b199c3e81770e49604610ad75bea2f44c7dac5b78f4cb3c6f6a4ce64a36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139796 Malicious code in await-dactyl-flare-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0997e94e577b4a4ff7fc6f45c2326910b7e2834f4394205bbbd2358585a5f584 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144806 Malicious code in meissa-fornax-ini-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 635fe853f926b64f3ffe8ed1be352a1c5361633308b5d473efc4932804483edf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146186 Malicious code in phoebe-vuepress-magellan-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55d4444cd67ec059751375883091c0d13009cfa6abb9484c13bd82a6e3c269af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143546 Malicious code in impulse-global-octans-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c0994ea4815ebd11f6226078d9a6c346e561085e6173eb701091797e4908a93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145742 Malicious code in oberon-centaurus-eclipse-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab928e91bad85f7e109af50b8b181746c36455110c206e998eb3ec3cb8fc7a32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in docusaurus-html-webpack-plugin-jovian-geckodriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4609116949d2888210bbbaff7fcc70912b1a68c57396897b64487418f2b06d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tethys-cypress-optimize-css-assets-webpack-plugin-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f105b3dd515bd0a46c837e65d9a353f5440a1ee4d2bb6b1800b64e2f8b2cb81f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141285 Malicious code in csrf-html-webpack-plugin-postgres-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0af2b65af5d61317084f768e05e83372d68c492ba3973262f0486b6fd8717364 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...