MAL-2025-146041 Malicious code in pegasus-lyra-rate-limiter-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06c9e568500c219c6ccdc4fd9ad68fa0fbb980ebe5b99f73c0a82e7549c7d489 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145193 Malicious code in mui-altair-winston-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ec698e61543ad380ee240f73da03f38591755503d7151b0f7073d3b8db12176 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142257 Malicious code in europa-atlas-despina-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5a7d6efd6baeb724020db9807fe266b2a6de8f0b3a65477fcf5f4ec343b8eca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147336 Malicious code in resolvers-sedna-callback-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bba612a2c27396bdd6c0082f37a7b31d445c50826d26dc620a866316eefb7b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145401 Malicious code in nestjs-proxima-lyra-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c3fdc828d51ca9f29e59b72b62dd31866819155bfebdd1cf1d0c0c07f6369e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146348 Malicious code in polaris-inquirer-playwright-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb113a79c674390ea13bdbb2daffec02ee11e4da8fb01b2cd1799b1b2c8d4d94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139300 Malicious code in algol-markdown-halley-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7abec0a1e0d1bd6e1a3f5a47c0ff1c8105d1d1f3a957783903b664a226c7ac3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147389 Malicious code in restart-procyon-apollo-playwright (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f42e3571477042a427ea800803cc8cce7743f22a2f72d8c43432ac8fd4a5c96c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142479 Malicious code in figures-procyon-betelgeuse-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e6ec9d293aa050ea28a3dac80d3023398df9d62f4a0660466d4fa36a0c7834c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140247 Malicious code in bunyan-mongoose-protractor-mongodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da03fc5c0bd9e4ea7622a6c29059265a630fae7403a1e904ce875bc56985f34c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147342 Malicious code in rest-colors-xenon-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aea9c8aeb5c94be268f5eb954b7f3da9be1607c0683a980ae34c42e812feb1dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146823 Malicious code in publish-writable-remark-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fec46f6e0858346720b7801097d9bd08d98ef8206557f600b699449748cfdbca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149884 Malicious code in zephyr-epimetheus-leda-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b93bd7f26a0d6052f2458fbd2a4d3a22ce879f801883dec1ed4265a6116b6f24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146860 Malicious code in puppeteer-postgres-algol-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 991c904c75f2daa11cbf3ccea2167b46a840af6a20f253a4d8a2b60fc1576445 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141290 Malicious code in csrf-miranda-miranda-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6618408647a61669b9b3094160d9cfc7e9b83d18aecdb77c1931de32bad4e8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144875 Malicious code in metalsmith-dione-phoebe-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b7fa0a724ed7a8a460cc993e6fe4b7139d1c9efafe18cecdbdc2df864e2c1a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148901 Malicious code in ultra-nightwatch-commitizen-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c5ba7ef101351f596629e0364d0b2222171328d574d9ce623ad8780380fb406 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spectron-node-config-prettier-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38125f8865078f53318f1d7935b87aad45c4b1dda28e2906a20fdb84ff3cf22b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in capella-buffer-cypress-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77087077b5391b1a282a989a66379aa53a36663fdd0657e6717ea975080e744a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in command-docusaurus-phoenix-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 996e2a382de928ecfd8eaa5ae6f897a6b8b2ee9a42281ffc74a5128505b36f15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...