MAL-2025-147433 Malicious code in rigel-lint-orbit-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e38cdb45ce2c006f7a290eeaa9ebd89179a65844456fe247adb34b597f3473af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145722 Malicious code in oauth-bellatrix-chalk-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ffad45b9b9432e62d0de16da747be275e74f7ff81edc924f259c69ac8464b6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148901 Malicious code in ultra-nightwatch-commitizen-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c5ba7ef101351f596629e0364d0b2222171328d574d9ce623ad8780380fb406 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146072 Malicious code in perseus-cassini-pm2-astro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eecf795ed972026476c3d217f8d763e7e2c89ff111b2dcd751985e8ac5aef90e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143625 Malicious code in init-ignite-weywot-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c9435d37d2057594780571c2451cb4e414f443dab9fd48fb27840ec7314ddcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144785 Malicious code in mdx-xanthus-publish-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b88b554e5795b09009304395c41d2d8ed261efbb6c45efc062cfe2be9d87132f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141221 Malicious code in cosmos-soap-pegasus-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36e0dc7491a58e1be275d2856f6b7447f9101ecf9d629c8ae2f6cd4f243f0444 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145898 Malicious code in ora-style-loader-miranda-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b7adc4b81369d78be0c306888de6a7958b95cae36dee66b5bebf086605344d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146860 Malicious code in puppeteer-postgres-algol-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 991c904c75f2daa11cbf3ccea2167b46a840af6a20f253a4d8a2b60fc1576445 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145193 Malicious code in mui-altair-winston-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ec698e61543ad380ee240f73da03f38591755503d7151b0f7073d3b8db12176 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146041 Malicious code in pegasus-lyra-rate-limiter-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06c9e568500c219c6ccdc4fd9ad68fa0fbb980ebe5b99f73c0a82e7549c7d489 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140733 Malicious code in charon-semantic-release-nashira-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed1789d099d0d6d3fe818d8cd16de7c18e8f8e48875e2d04a981153d07e84bf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141290 Malicious code in csrf-miranda-miranda-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6618408647a61669b9b3094160d9cfc7e9b83d18aecdb77c1931de32bad4e8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145664 Malicious code in nova-postcss-loader-nuxtjs-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10a129ef4191202f0f2db76704ca51ebd60405bfa156b39b9ee8c9a0adc811c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pino-pretty-hyperion-terser-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df02f906063e61b6da517aab704a23c427a3b32691080d2fd2055d4a068aefe8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148207 Malicious code in spinner-postcss-loader-yakutsk-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fa951d4e8fefccbc6733471ff7a7dce0e3e54f085f384cb008888206fb1298a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148381 Malicious code in superagent-eleventy-mongoose-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a10753c0a882ae2b325348efd7816467b316be6e149fbcef89fbd7ef2ee98699 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148840 Malicious code in typeorm-comet-carpo-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3105ee9bb6ac739ae73518d846f54ac4063dc0314d1af323b3ed40306377a498 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146348 Malicious code in polaris-inquirer-playwright-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb113a79c674390ea13bdbb2daffec02ee11e4da8fb01b2cd1799b1b2c8d4d94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149388 Malicious code in webpack-apollo-remark-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 421ceeabb85389e3b45f969cde72ca79241252f1cf6315d2f730f5367e54ce8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...