MAL-2025-148537 Malicious code in terser-request-test-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d93cff86f78ba974b32c4a49a98e38139666c4e5f9eaa44ee82074c2c4ccec1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149070 Malicious code in ursa-rehype-charon-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52264c975cef4451250a9b6d544e252385448007653f0902b60ebcdf3ca76211 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144181 Malicious code in kinetic-pino-pretty-centauri-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a32af7d0f49e379c176a6e6103f86e25cb05acecb7aad3d0e0bb45637def324e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144594 Malicious code in lynx-iota-cz-conventional-changelog-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c1652856c44e9fe7376fb9868f2b409d579a3e47c2aec587f52af141990bc4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142561 Malicious code in forever-astro-element-ui-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb32b73101078f30afc48ba9b5202a97f6b98b70d003ee7aa0e2098aa588b609 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in winston-update-aldebaran-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6562c9a297aec145961edadff808bdcf3d80ab9e1188cfbb9a65529b2b98b1b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cluster-testcafe-chalk-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e51d2d3f0008db6e091e6cc177cb67d46eb5d7335d782a5b703409653d2bcfdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bootes-nebula-cordelia-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73fd084dd542b21def1987eedf23c9ecc771d99ce6b923f8b0c800a2d77ac8d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147076 Malicious code in readable-astro-npm-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c647e05dd037905883f77cef6440b9ac81382f0ede90b58ede2e43bfc6a99a88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144837 Malicious code in meissa-supervisor-markdown-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a60cdc4d5317b650a261573ff13fe8a451e6e91f68730697fa7045ac908f307e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141989 Malicious code in eleventy-aether-package-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b35202d4e67fc27cc38dae4b8a48e505bae3cefd543cacc2a79d667c7cf47751 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140916 Malicious code in command-nodemon-foundation-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42bb7856d8b86303e4675407ea4fd7ad07065dcd9a5245aa12f3623b5f23df1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148408 Malicious code in supervisor-vulcan-remark-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bd09e647755e974ce82a7fe8fa31384e0ec5533ca9d8f84489011c9eeb5e7ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146560 Malicious code in process-nashira-alphard-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d892e0621ffd010621c749e7224836ac446d06f96c997e37d0d3e3eb69033e4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in titan-child-process-colors-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47fb75103e307e237f68dba3740fb8ce1abeac8222169c1b09e1b817334b60ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sails-terser-bulma-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0b5d4a721c3461428afed260576084177aa8a1f51ebdec6342d0cc814bd1c06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriver-manager-blitz-browserify-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cc0a4eff4c39f48a9eea63ae5964eeb9d4723510f3e9bd81c14c04e40883a88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sirius-foundation-sagitta-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b3ab63604cb13b980d2d70c5b2c199f034d114cdcf1aa758bbe94394b8f2ae6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in luna-module-polaris-farout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 292b22a04e5c06ed11440c18bc5d5e0de585f99420c30f90f179b1222075e8ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in halley-polaris-kinetic-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62d343989e159b61f75d4d492dbe2e9f167c9fa715769b532eba6a98ddbe76d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...