MAL-2025-146971 Malicious code in query-lint-staged-library-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc90179ed88a2d01fd66d407303c1ceeb80aeb0b9e92f750ef26f04cfe203e92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149619 Malicious code in xanthus-build-development-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a806dd95a5e6b3269527ab019eececbf5dbde8ce953c2f0a04ea6db7460bb15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141159 Malicious code in corvus-luna-chromedriver-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abc57845ad897dab7e51dc698f8f4a85f4640e5b4759380e4673f476f8d7a59f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149740 Malicious code in xml-version-rimraf-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5c8e258cbbd7b05fc7b948248f6d0922d4fcb8d1fd555abab444074a2c1a039 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146529 Malicious code in private-apex-async-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 809989375fd7c4fee0ad26f02ee0690a7036ba01a3577306714bcb41ddf649ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140557 Malicious code in centaurus-vuepress-concurrently-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac3d17c254d20bfae82b30318943e94b6c475fe6eaa7f65fc00ca1b3cb773d39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139232 Malicious code in aether-io-quasar-oberon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 463aa37c4b880fa305a254100385206be26e5f5ddb3ee65314eb015fdfac0cc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142578 Malicious code in forever-webpack-toml-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3925f8ae19c8fae12616fe0c2646581e2ce71c1570dba86b15346e834d836dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141541 Malicious code in deneb-delphinus-orbit-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9301b363189b8f48650bbbbd3a8d085265435738bf77651aa5ddaec801cf1724 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145061 Malicious code in miranda-toml-xenon-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dee0f69be118b6fa662a522d7925c52d6fd145c596702b2748315a189fa3937 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140717 Malicious code in charon-apollo-ganymede-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a453ab8306131fbef52d8e12174348e51bbd1e7c604b02ca83a55b33e146a9af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142053 Malicious code in enif-meteor-protractor-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d280bc7059630f2c2989f4ae50b3817b2c915851150845a4b67d6caced3bf3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147026 Malicious code in radiant-tool-postcss-loader-algol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc4499499c8548c0ac5d008278a2990487d0bf10c924b79a538991ba90a0eee5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144698 Malicious code in markdown-pdf-oberon-rest-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6736e26ccfb46fa55ed3f0c9f17c3723e146a0902526a7486246a1f5ab8b426 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148848 Malicious code in typeorm-loglevel-xo-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0305db97622e16a28e033c862c4a5ef154902714f851182e21673992a75da64d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141548 Malicious code in deneb-markdownlint-venus-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9072afaa134e1e2a0c8fd4b490cba7e97b3f7cd3d0a7707a1d0e64a8aca1f89e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147827 Malicious code in semantic-release-hugo-vulcan-xo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22669f1738276fcf0d0861f934453f7eac47379e02ba69f509ffde9eade5eed1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149299 Malicious code in wasat-restart-loglevel-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 574c669fccaa341ec62ffab852152064911a73868724f75a4af37737a8830674 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149835 Malicious code in yonder-corvus-semantic-ui-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6257c44e54245534f9269eb8c317701f310b8e97f0b8feb397f7d590e1691323 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143714 Malicious code in iota-centaurus-redis-terser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe3e7e68755dc92c710315c82d460fa1dc8e971f7f6c85700232c5ed52dc7b20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...