MAL-2025-143099 Malicious code in grus-prettier-plugin-markdown-babel-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92c00f4e6be82f73104ac4b5a4fd55b9981d7034b9a4fab5d5cb577c6985de63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141390 Malicious code in cypress-alphard-proxima-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbb90a00a2e076e20237feffd9b33004ffc27b506f0d8a93d9100e5823fd1745 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meissa-levels-telesto-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dc40869949a69768360f9af63c89cea3b28132151b53e72fef18b97eeaecd91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139395 Malicious code in antares-castor-yonder-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d988bdba1d2463dac031e9b4361d5cf5f8e29905aa4c542b324e6cfe05c62bec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144662 Malicious code in magellan-sedna-mysql-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d29b65804b6bb09003a5cc8c885d0d244a90568ca367173e330cce79e3d3433c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142007 Malicious code in eleventy-nightwatch-betelgeuse-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b7320bdb07066e0a567dc2a7383e4ee563738cbdd9f7bb0127ee6f78f232f2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142238 Malicious code in eslint-plugin-public-forever-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0d03336e11c27ad162f3de5c4a1d791e7294c5177763e8c8499faf2ded3fc75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143884 Malicious code in javascript-nodejs-lint-staged-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 950a7016236c5fc899c18a2afba5edad822d00009aafafb79a9a52e55dd8a106 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142845 Malicious code in gatsby-miranda-iota-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddb652e8edd6e45f3edc03a5a3cdc6e3175c55ad095fa5a223aaf9e27be71c84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144743 Malicious code in materialize-fork-redis-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7330231bd4ca11a5cda133e886e1e711021f7dc403545ca5b0527970ceeb58b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147523 Malicious code in rollup-plugin-ultra-ganymede-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69d84fda97f34b6e4d7fe644721804df274f83af37ded2fbe3c78cb14d629540 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140132 Malicious code in browserify-meteor-exec-jsonp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 122e7097b25471597433a406c160c80c2b71d0f76c3ef49421322f2d34b31c6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gacrux-airbnb-dynamo-xenon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 082cabb88f73574de63100da1917ecdec09c5505d222982c49f8283faee9254b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in optimize-css-assets-webpack-plugin-markdown-octans-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4fbe1c2b2cde5513e863fa8fc192ed8bd1e1098a5964c8016c02142c5a7d565 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xanadu-comet-nodejs-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04c8b88537d70aec0a919a25e1ff2865a738eec203cf17419753dbc477806aee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rest-rate-limiter-xanadu-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76c30e78fac1e9a3f7fe1c7a1edd56dd8dd4ba3d954eae49fa7bf2dec37f7404 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in metalsmith-optimize-css-assets-webpack-plugin-kinetic-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 085563b1c755c9034436d3a7fc944ed51789e52fd283060c8aa5fcade7727148 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pm2-grus-castor-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b01596d797dab056c781ca726c1f03fc07bec0ea69821410f74259d0a63bcf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bootstrap-arcturus-helios-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3947299fa044b87eb92f53308452eb8cfc390a2fdb66832a2c0fa232ac75a0f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in csrf-izar-resolvers-nightmare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a98268bc4d6827717267c3f7cb7dcdb135f6828102d3a638c513591381dff15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...