MAL-2025-142985 Malicious code in got-rocket-build-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 028b8aa4f6185b93d879053833468fd2cc925423325abe587d94abab54db54f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149645 Malicious code in xenon-grunt-elektra-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 605c1515f7a09e51dec27180935b274edf6061e32b33b0ad83fe5b42f9ce9e75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140427 Malicious code in carina-xml-europa-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbeb2f166f38c0314f8044f01c7be8a2450007685583f33f3f7419257e11b3a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145165 Malicious code in mongoose-sirius-bellatrix-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 788186e9dbfe2d3a22c1de2c8c0383e91d62537beca0129859dd356f0099d861 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142968 Malicious code in google-pavo-xo-draco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90c417baa6822c7abc7ad976bdf12e2c268d79c9b57ef74e7edfdde556d3a117 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141696 Malicious code in dorado-protractor-ariel-farout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b13fd03154d71a25bfffd817c62d2ed9b024434ce213d48112596407a8e63926 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140086 Malicious code in bootes-npm-nightwatch-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78ac99d493dc23e9056d3b5d36fa33e25f6df4dfcb9698aaa30abbbb5a315d3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146708 Malicious code in proxima-child-process-bootes-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fed55da2007b599f0789fe85401ac308ab15df67c7ca7d3e08cfcda849e87df3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142728 Malicious code in fusion-cygnus-scripts-carina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0da0f3ed82a6802e1032006ffa7496f3444868266e937a6df6c74d62d391362d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142646 Malicious code in fornax-promise-less-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc474568ab6ea1c4a33328711e82d6c2c1af6eefa3436ba7ab3702f46c427ebb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144487 Malicious code in local-galaxy-css-loader-chariklo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62c5d995b2d7c1379c608222f6a930f1dd0abf83465e12d9acd14b9ec66aedfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147189 Malicious code in rehype-testcafe-iota-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7d5a0ef86d9d1e26796efa729b64cfdfbf09a3a2a2669f32d1e01e0b38ee963 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141828 Malicious code in dynamo-kronos-loop-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1facc111643156c60818083a3221391ae68c90805f74a1411946c0be5cc3821 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142586 Malicious code in fork-duplex-request-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e738a11e30835b56b26b4fc6d11d4de4707343ac26462423c3509933099f59d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141789 Malicious code in draco-auth-resolvers-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e01a1e333d58856b3ce23766018ec3198d0aa4fc6404f150f0c457c256b1d104 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147631 Malicious code in sagitta-xml-child-process-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a994e3d9f806b277e2a6fe89497b8bd8b217966da20b43ec15ace8cfad2690ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139323 Malicious code in alphard-express-pulsar-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfe342497592d9aebcac597ddb7000c2a6548ce707730f2dcc2279c5cdf0f22d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146485 Malicious code in prettier-plugin-markdown-hyperion-xo-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aae3a09c4166cbe887283171af6a1441547a9f112d8b65ee4c1dd48fd5365250 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147199 Malicious code in relay-cors-callisto-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9749ec9054bca0d033b67273f121b943ff34485eec11b3bab1c3b3fd501e8aaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143870 Malicious code in jasmine-ultra-magellan-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc63d7a877be1b31e23320b8331884aba215edc7b967e6bda66e1813e04d2b17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...