MAL-2025-139172 Malicious code in acamar-dagda-canopus-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f77f13b3a7f9e9e576d7e42f24d4d463de5af216c31245b4cecd87f52d7ba10d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141060 Malicious code in configstore-prettier-css-loader-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb9b61611b12beafaab6b312ac0c7e46444736a1d2d38ba6ca30138be65e83ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148301 Malicious code in stop-polaris-gravity-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9eba5f01f9a9e3d932f8d07a8043fff56153b5b693c9f0aa45bd3d51c997c687 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146253 Malicious code in pino-spica-leda-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c8cecac1c1179d9823b5417fb59873c0562de62cc50e700c3015893a3f59ae9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146299 Malicious code in pm2-halley-vega-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ca1d66ecbafe685efc60a6bc86dc19f0340f58aca3c399a481f5b650b9817e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141907 Malicious code in electron-builder-leda-astro-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d66f13bb1ee8af20bc55eee9c56fa3ad914ff33aea7d902a57b02f6c1cc34ada This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142106 Malicious code in epimetheus-repository-package-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6fc976d3ed6b582841dba0a53f2ac7f4e88026b21109e58de73df97556d4ebc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141289 Malicious code in csrf-meissa-nodemon-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e942da9a59669fe15a93064e91bc37ff7096685eb34fa16ddce7f223f4e9df6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144100 Malicious code in karma-deneb-eslint-plugin-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca28c4630f7069c8ff7f629c225a8554f422bf681c109a76cdbaabb1cc4edb4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141807 Malicious code in duplex-duplex-nightwatch-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16340ab3105a683b811a149bd270ef3c551a0f53e6c9240bdc58022ed1215aeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143101 Malicious code in grus-pulsar-sqlite-geckodriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2e248f5b89242e943362341bbfaf38bf9eda746454a0e845ee2aacaceed9773 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148267 Malicious code in start-chromedriver-rehype-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa06272d3b898195ececb72f425e69fabf48ad1d4613749198a43e9d6738efeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143936 Malicious code in jest-testcafe-stop-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a86d1fa573533763b9af0986cc9b61da9873c4d1ae1b54d6492b6273e0b52129 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142093 Malicious code in epimetheus-enceladus-commitlint-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b5b92625cee23fb6202ced8f506a7afb92981746127a2cbdd7cb2004310ad60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145166 Malicious code in mongoose-ursa-csrf-pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff09a0e2775c3f104292df18673f57ff3a4052c29debe9466012a0994d4cbbc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141115 Malicious code in cors-antares-kastra-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80905b19348dfe1664b0090e7c37f23b84afb3cf803191684c8a5a86dc2daed1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148326 Malicious code in stream-mysql-typeorm-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35405c74b80b740ff6692a59b7390e4f6533a8de1753a6bc8b734da445044bb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142309 Malicious code in event-deimos-mini-css-extract-plugin-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10ae3339de31987245b0464e66994d4f5c09550d0710bd98c8ce08bb3c24c76d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148459 Malicious code in taurus-apollo-postgres-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0c504442fde8f0ce95ca21f1150316e44ec42643db293dbf940a6307e028fde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145876 Malicious code in ora-altair-vega-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28f60281db13309d62314a0a9e16f3912bee556a7237b902eeda43ba95885397 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...