MAL-2025-148459 Malicious code in taurus-apollo-postgres-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0c504442fde8f0ce95ca21f1150316e44ec42643db293dbf940a6307e028fde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141115 Malicious code in cors-antares-kastra-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80905b19348dfe1664b0090e7c37f23b84afb3cf803191684c8a5a86dc2daed1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143815 Malicious code in janus-lynx-nebula-astro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c58283b03b07b8dc5e0e6a679d5e9ea4d0b397a111371b7e52f2647e692d785 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146485 Malicious code in prettier-plugin-markdown-hyperion-xo-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aae3a09c4166cbe887283171af6a1441547a9f112d8b65ee4c1dd48fd5365250 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142090 Malicious code in epimetheus-apollo-commitlint-config-angular-relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0da73a2148d09e8d12fc54a7f894411b1f1f805497bc1d98cacc8c61e64adf08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141501 Malicious code in deimos-mdx-publish-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 191cae5a5020a0919ae5a62e6668e0bc50d53f30c98d7c2746f1d3d86bee39fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145876 Malicious code in ora-altair-vega-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28f60281db13309d62314a0a9e16f3912bee556a7237b902eeda43ba95885397 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142309 Malicious code in event-deimos-mini-css-extract-plugin-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10ae3339de31987245b0464e66994d4f5c09550d0710bd98c8ce08bb3c24c76d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148610 Malicious code in testcafe-xenon-chakra-ui-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e267c663a12b26a567a3e6b07f7a2e36b7ae20b41b5d94b5f4b655fd5f09d444 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sirius-html-webpack-plugin-izar-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed5b12b6bff5a1d345f252be0db66d506247fc87ad6a553fc02b7a9aa498a52b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143771 Malicious code in jabbah-callback-lacerta-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b83b3a3514c3342e03ae6ef7c003766fd44a1062721d488bf938e4f4a48224c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147100 Malicious code in redis-fornax-loglevel-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60f67170504f0ef6eee5c72009ee1fa84721cc1ce0fd73f168822a42262dfc07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145610 Malicious code in non-blocking-hapi-less-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 075caf1674ff7e833f0bceb57dab4fd4abd685e881659c5f95b4ac57f926a0e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149217 Malicious code in vuetify-node-config-cressida-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 293161802f07c9de6661d6fe9613860acf582af0194c832439c21fcdf8700510 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140965 Malicious code in commitlint-config-angular-jest-update-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d67ae4ba726fd3e6e3db7749730a7d56351d54d32d08a77f9a7d6ee31dae1d26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148246 Malicious code in sqlite-yakutsk-lynx-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77b8b5a0c253c8e58cb6b450ec34b1b4da65da1afaadca90b314f6ee4c26df54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140844 Malicious code in colors-corvus-postgres-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2eb7eafb397099447d7894757e36ecfbe2dfe1fc171de2c28d818bd4b75bfaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143910 Malicious code in jekyll-nodemon-lint-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97eed5e8ff22cc9239cffa973753ab2ed9b0ef01e31a43a734b87a8a922d04e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143423 Malicious code in husky-ophiuchus-despina-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7c4bcad394b60823fa7432a1d7fda1282df8ef8ed4e41b5c7a2bab967654358 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141740 Malicious code in dotenv-parse-variables-yonder-readable-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68837fe0836c5968bcf8de92ad6a85b333115663a6f25cfc16a82fd36ea7c5e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...