MAL-2025-142328 Malicious code in event-test-ganymede-mdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d553a01be402a08f876c80f5c3bd81ea7a7f426a4a848f6c7fdfb64fa4283b08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140973 Malicious code in commitlint-config-angular-ultra-bellatrix-mdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c9c226c4b1a3a0f8193958d600960e0a77134c920f899336f377da7683130fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148557 Malicious code in terser-webpack-plugin-mutation-mutation-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 093f6cd3625f88f87ec25dec35d3e27866fde2e123a38d30403db5f1abcf7846 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142912 Malicious code in gemini-postcss-loader-typeorm-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e26d098f2acbda848cd498a85e44bc66024352bd08b5b37b1056b8c449562648 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149109 Malicious code in venus-europa-phenomic-relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 703167ef60682806e489086aa92d5992747677f48f9acf863b6490bb42e7068c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145958 Malicious code in parcel-europa-publish-carina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4a09bc38436786092d99a19e3bf9e0d03927398fd2aeb6347409e17722db57f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144232 Malicious code in lacerta-apex-weywot-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5af945fd83b51e0b4e1ef98ceeb87b03d2659cd4bdf13b320dc9ad61431285f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144562 Malicious code in loopback-sedna-vulcan-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68e49376076f59d319a4d476b48a806f2b480af776828daf05d7824c7c6a124d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141213 Malicious code in cosmos-ora-draco-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3873112fbd1332f5a3d578153dc632d051b129da204c28ee2625b86454b1913 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146487 Malicious code in prettier-plugin-markdown-mira-rollup-plugin-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c59df9e16b1d88777561b0576f22280225530cc5984f4353928fdfe3d86100d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139183 Malicious code in acamar-perseus-rehype-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f13b3b72eddbdd6b698b8dbe987a04af1fba5606494eadc3fc663de33f32e42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142989 Malicious code in got-superagent-winston-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0af67224d6ced20e78cf16853a62e8f18f7cb7583df01f4ed51adcce2de1bb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148850 Malicious code in typeorm-materialize-meissa-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7431473a2a7d044e265be1ea3717a4e6f421228d6e8498e8954d81e8b54ed221 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146394 Malicious code in postcss-loader-europa-webdriver-mocha-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f420b2d238f8b63539924380a7ae973c5a1f00146ed74ba4166c0ec6b1e96e71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146395 Malicious code in postcss-loader-fork-levels-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6eeb87c440bcb3eff380092f73c31bd01232d896ff500023793df85c072d0644 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140877 Malicious code in comet-jabbah-airbnb-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f66b30b9c620662089edc15175afac4ff8902761de404a5e35d24b444ec0ada8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145422 Malicious code in nextjs-postcss-galaxy-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5546276d3b6710db29e003e3d35096e0f4ec408654685b966043b94a6f2e55fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143350 Malicious code in hexo-quantum-vuetify-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac9e6b120842fe414c20ed2e4bd84e574dbba362c6fea744917a7b6b0d34bdb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141552 Malicious code in deneb-oauth-changelog-rehype (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d5c02fed0ca0d742c365b1cfaadbba82eea79ac78e874e946f8a81179862300 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142452 Malicious code in fetch-polaris-loopback-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6544bff7381c9dd2c0e1de48ed79409665cd07f2f3ae49b375ecf4ddd3545372 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...