MAL-2025-140684 Malicious code in changelog-slides-update-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b821ce07d8e9dcb843859974063b10280997900b48d7779d021b1192131a7ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149259 Malicious code in vulcan-vortex-soap-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 167edaa616eab6481ec791de4d0adf51b73b0d4cbb0df8373c2d1a10d01b7f4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144264 Malicious code in leda-convict-commitizen-cassini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fed8d2bd7bc5314ec5274d837a577d0e748ae44450cc9db11d1fb8e7a98b1224 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149276 Malicious code in warp-ursa-kastra-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b98d11f27a0a6ade7b53275ff1860902cdfd84ce6a16f09337ebb7895eb0160 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144223 Malicious code in kronos-odin-husky-impulse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a22743875e5744cc8a70917be29c9b2a3057d3afec2c9f87c65bd78d07c960d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149252 Malicious code in vulcan-reveal-md-ora-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2277bd541ddffacbe9f8d9d3f072882300533890a4b3807ec413ee381b2b8c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146542 Malicious code in private-semantic-ui-lynx-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55cb72d41d91df53f77987fff3f52958a85e6b1d5444c05279e445ce2e4b1e1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149066 Malicious code in ursa-phoebe-capella-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4680409f54b1672280ea548697d53e97ccce528f1084641660525b8023e6b0c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145261 Malicious code in mysql-pm2-ceres-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cf871a4877a3996129929de380f4c025915ab6280a12ca4aa41a9543b269d6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145670 Malicious code in nova-umbriel-axios-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a48b5da8558a447c6380d7ad1dd3f14468d26f6806f41b77ccf389e6b1ab712 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139950 Malicious code in bellatrix-pino-nebula-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5809b5630c0cfeeb0cfc70f1147f91f5cd46f8af4c6bd74bd28cb99c84a0d488 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139798 Malicious code in await-frontend-duplex-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70b1660df20d7f88c2fc37a0a8d4337f54a9d483ee2fc063ac992d6e53df1b3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148082 Malicious code in solis-polaris-playwright-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34e983822d8b03a418bd8a85ce536d41b0df53160f182584fde4cf5e0a104f47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145313 Malicious code in nconf-elektra-testcafe-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d45f11da5260377602e2a2dcba65f2ebc42a878b0040f31dd4e4a92f948efa5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149266 Malicious code in warp-comet-csrf-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95efdb76a77c45a47564e1fc7a242ae41eeaa72b4429cab3af068e68a2d8772a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146771 Malicious code in public-zephyr-neptune-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 072d15f062054089466bfebb73e1f6dba852a9ff2763e0b168a42e2ae7742225 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148672 Malicious code in titan-buffer-sagitta-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8dd25da2ea12c17bfcc8b82c1f080529ed705b80141907868b255187769fd4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146427 Malicious code in postcss-yaml-lynx-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7991fb1fffadbc9283f03779f51fa19d71c12c033f9ba3a11c26f4941dcd670 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144349 Malicious code in levels-bootes-charon-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6250de6f7530c83732e5500e5ff0844acc606c31046c38698aa8affb35a28ba4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147127 Malicious code in registry-firebase-less-loader-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60351adb0546cef9790a9625fb2dbb847f363ed481f8fc352d9657ac57c8b3ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...