MAL-2025-147409 Malicious code in reveal-md-fork-rehype-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7bd2af128bab75e78effa18885ce78d40f2fe2aac43ad15b786c5fcb3399f83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143627 Malicious code in init-nestjs-loopback-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf610150045073ae0d0481664a90fa69a332cc012f749af053d58550e00feaef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144770 Malicious code in mdx-miranda-apollo-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45e7684b2c1caccbc41129dd131debd88ef627e42a25ac781346f8d69986211f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149669 Malicious code in xenon-version-lyra-nuxtjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39b102d936e27cae1f4a4a0d270ab5454a9315e36ace9caea6d9a6ee29acd289 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144569 Malicious code in loopback-uninstall-europa-vulcan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4244f6505f7c45e72bf30aca99770c0cc5832f3159ed307e19d993b30c5af9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148929 Malicious code in umbra-octans-soap-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9f0d0334ae7410a74f0a261e537a93142679ec79c12d9de6a044cc97119479c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141084 Malicious code in convict-promise-transform-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a773ff24f12fd9deed0f9b0e82fb801841739a9bc9a21b854986738c1090633 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144093 Malicious code in karma-aether-betelgeuse-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b22bbc49c685a44aec9fe6c306cb5baa37e082c4a9492ccaf2e80f03045c3420 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148225 Malicious code in sqlite-europa-remark-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 499420da960ee4fe7fe2479f0c22372a570f7973d6202e7667104cd5e5be1889 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149737 Malicious code in xml-triton-flare-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5071a55567cacf1803e3273147a53c48f7b2dcfd1cd59b0a11d38f1d5ff0c452 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144250 Malicious code in lacerta-rest-mocha-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cd2cea9b29f12c8809dbad7c7cc15741dc113c1461e85f0325ef348e76f7845 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145799 Malicious code in odin-mira-spawn-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53aa37a11a06e592a83031a43a7cd565dfb52011bdb1eddb5c685681580c515f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143638 Malicious code in inquirer-aquarius-lacerta-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a49c35ff5042357a7a555393285b27bd46c2e007a43fd2dc56455afcdcaf449c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147861 Malicious code in semantic-ui-yildun-dagda-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34a832469d6eba91b6ab618960a4bc5428f7cb35191c651a4f3f8f1ea7fde050 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140836 Malicious code in cluster-sync-development-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24ded04885cce013370c43c85d9b42e94e798f39aab69a13d49118a8fb5df4d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144480 Malicious code in local-aquarius-callback-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0de1111468dd157dc24fdae11e31d4d41f4cb9001bc90e624802b0b770804ab2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148415 Malicious code in sync-axios-cypress-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ad999d55fd36d7657b922014cc3a2505fd0f207e2cea092b880ebc51b47867a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147238 Malicious code in release-it-transform-grus-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 906a845137c30381484dbf2cae553ae18304cb57ba09107e11212c8657a24279 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143819 Malicious code in janus-meissa-duplex-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57e7a4039a5d6413d95e4eae7fb97136fe2aea00c3a1fe6fededc4daff50e582 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144222 Malicious code in kronos-library-jasmine-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e649f5132815d972e00153417bb9efce79e604707867914d1eb4c868e30046da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...