MAL-2025-143927 Malicious code in jest-markdown-loopback-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a60756963268718f1cbe662239160df39fab09cb6b8c7ce2669016770b7b08ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144294 Malicious code in leda-sequelize-pm2-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf6c878fad16f3c94bc36a1465061235960e1dad3e2d0f0950c4459a35f53146 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139467 Malicious code in antd-sagitta-meissa-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1581d6e8e2573bd00d9893152ee6e0435a1ee4944916790d0c7185b6a37babc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147811 Malicious code in selenium-relay-nashira-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 431b7e15efb9c3f0cf9e13dc4183e0b68c73965cdcf71243a54a558c44da98c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141311 Malicious code in css-loader-pm2-meissa-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ad65cb01523b340d02484b6784a0e5e1544a685abd8ffac919f717fe1a13b1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141453 Malicious code in dactyl-remark-titan-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d66bc1ea42bc98642c4ab4324c7848b4233721a1d6d28ec5e7e7d4559a5095a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141992 Malicious code in eleventy-callisto-forever-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 447abbef07e2169825384d0a4f6cd21674555dac84ac23aee274c4866a00fc20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141813 Malicious code in duplex-jsonp-zenobia-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4493a244923a35fb8a9ac3f82cca657c698d3415f7a87aa9582c28d6a90acb4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149096 Malicious code in vega-pino-async-xenon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6d0f26680e56ace586af2cb62e80c1e93b2a6b1b0f4fb564bc901d72d68adfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blaze-uglify-js-schema-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f8d5f1ce6793923e6a5f433e28c137a347dd3e3071b1cfcf658b2ec25fcd7b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vega-draco-yaml-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aac5d089952d08c761e5e2636c10cc88b9274023ce0ab0b45686985cb0d64c17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cluster-virgo-octans-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fd872b8728df89a1bf3c4ec57b4ae0ffe5edf56c0c2116d6270a69db9bf2e4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fetch-process-perseus-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a462cabdf85ac98c2a5a3adc4f4470f53cbaf6d2805974518cbeb4e6bddd628f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoebe-pyxis-cassini-relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e46047fa723bea944665489dc9ccb6b9f98032af680facf37378bc1086f485f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in publish-halley-antares-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39df4aee8d6febe3dd5170aa15617a2930747bc89bdffb22ce7e77513694c593 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miranda-firebase-non-blocking-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c957b2e89a78b2ed4ffc7627c5903a922bb5f6dd009837001276b57045e6a3bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142244 Malicious code in eslint-plugin-thuban-firebase-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a802786c89a13e156760fbeb7db45c40c68ecb95bbfc4db4e4fd6dee4a743054 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143121 Malicious code in gulp-package-remark-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d28303a473c0b6823ee48af1ce091a49f265056bedbcccdad2bce60455ee7bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139256 Malicious code in airbnb-janus-uninstall-mini-css-extract-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b70366c5c64fb5c19bf1e5a563e63cf75f489e7a62428a79b4911aceb9ee3f37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139907 Malicious code in barnard-html-webpack-plugin-commitlint-config-angular-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03cf84f490e85f93aeb7b72ac10d1b4ee6b01c6c1aceed157aa3de391b02c2ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...