MAL-2025-147925 Malicious code in shelljs-procyon-jsonp-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09ca5efd7e26a2a044bcacfc940c912c3e4e405c7ae2bc1cad51a38ae44d3322 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144154 Malicious code in kaus-sagitta-less-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49566d59a215e380c5de900c5825465d3fe8d859d586318e920d733797bb320e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141951 Malicious code in elektra-ophiuchus-hermes-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 773d7cec7eba42a15eb28c5ff40c529ab002c4ab4f2a7b1085adc30aabf1a1b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146470 Malicious code in prettier-json-tailwindcss-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee324e231c84dbdd64e4ef7407cb835517a03e0f5190c29b420a89b03dbb7410 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142252 Malicious code in eslint-testcafe-readable-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb8ee62a61e56cdffe10f030dcf9491a98d3219334ff1c007935f2c37dad4045 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147580 Malicious code in sagitta-await-nightwatch-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 599b02ee33e0ca172ba387eb8fee06d5bd917b1b51bf2136c37300c417901fd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146408 Malicious code in postcss-loader-scorpius-centaurus-farout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffd95c0b4860dbb6693adebb4eb4bee696b2d9c115cda25ee2ee39158905c40a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146420 Malicious code in postcss-protractor-karma-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d16675a33058376a90e011bd1d015a37a8d8b845bea120f47975b1d70153514a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147842 Malicious code in semantic-ui-concurrently-enceladus-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e9348abe7dceafcbea1bb3601475a31350792e0fcf6ac6edef9d9fbc27f3268 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146591 Malicious code in procyon-envconfig-readable-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6697fea7d29b65951aa52d6a9e51701f0dd3f5832e77e69d3997f6e525d28ed5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148366 Malicious code in subscription-request-koa-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c68b8002383770872ccdad0a33557462f10d80f27bd85d0cf04a9636bc71571 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141536 Malicious code in deneb-celeste-grus-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f133612cb4622a9ff368b70b9d7c1d3a32e82cb081c81b65846dc2f0327e20e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149560 Malicious code in wolf-pyxis-rollup-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 825b2089e674a1b4f07d988dd4dd46073f675eb1896bfdf21ad1489f1458389c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144109 Malicious code in karma-gridsome-backend-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 310d0539043ad82350363d64d301dab21bc3058b5ed8f2b8c40789257f6e6992 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139652 Malicious code in atlas-orbit-ceres-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 390c71dca69fcf971784d38898462de4be130994baa7d5fd5e56e0f303736b1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146481 Malicious code in prettier-plugin-markdown-eslint-config-middleware-optimize-css-assets-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 426eee1ab89dd01a3adcd9ec2406476a79aeb502c22ae7e6c8fd4fe9d4124d2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148878 Malicious code in uglify-js-quantum-vuepress-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb55c4cc946096ccfe269a2ce5ee5673ff8a6edc583a3f3b981f1dd96bfe7683 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146019 Malicious code in pegasus-callback-build-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa451bc61732e3800480939f0e2c59aacea12ed0549347ad33424411dbe39b55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140101 Malicious code in bootstrap-enceladus-readable-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0f2dd45bca27f657cb02778a1560a63a6131cd19629224718b710dddaa1f7ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141067 Malicious code in configstore-wasat-wezen-ora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66701c6c203fbd7db0e370552a5f119cbbb92f5de3ad0aaa4d68f7aa2d274940 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...