MAL-2025-146334 Malicious code in polaris-despina-galaxy-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20baeb4de7139e23de09686c30c274bbcbbd52b6a4b6ceec47ce9c6ac321597c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142897 Malicious code in gemini-enceladus-thuban-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e8661679b1077c5c21fbcd3671502a87927310f0826b2a9a9638a8362b6fc53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148020 Malicious code in soap-fornax-await-blitz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af7f910b1a0e23383dbd2120e5b535de66e98328775a099283703bbb8bb6264c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141220 Malicious code in cosmos-sirius-elektra-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 142855f368ae9311f0496c0eb37fc7d3e2721262d32ec4861a9a15af7ce9a823 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140847 Malicious code in colors-dotenv-safe-backend-optimize-css-assets-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6116a38ab2e392b9841b501586a3f93c8ecb5457593cd69dd4d601275c119002 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149158 Malicious code in virgo-halley-norma-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dcd7da4e4986eec5dab4e8e83d3b4496f034399ef46a1ac01bc2c091f61fd5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141426 Malicious code in cz-conventional-changelog-phenomic-uninstall-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65efd88af0ad0e19aaa51594495daaf09c8f860e4679abb776dab88ae7805818 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140505 Malicious code in celeste-cressida-sirius-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc225a509c12ef0192954308f084c3a6d29def818adcdadb80c204a0e75f04a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146763 Malicious code in public-npm-leda-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d414b5a8051e12cdb7d2f02f4f7d21f8fe059fbb4aea411607ec42eb2ba24c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141645 Malicious code in dione-leda-meissa-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cdd7424b138fa68f71572d8066f481860e9136ef3c9711080a68be656b53719 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146134 Malicious code in phenomic-got-uninstall-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c241c79c54717669b1615f6ff39fc3f1d6345216857f5d19eb4f75e5baed112 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139330 Malicious code in alphard-mongoose-ursa-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 322015036a324c266efd49ce30cd139258c87d00c27958a48d08ff1172e2a08b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141435 Malicious code in cz-conventional-changelog-supervisor-loglevel-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52fc46ade320c9f26fbb269899c5d6682e7f1674db418e2938c9fbe50833c033 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140079 Malicious code in bootes-enceladus-gulp-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cab60a63c8511b40bccd2301495ffd61cbbc9d28f9404f78a527effde351c45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144704 Malicious code in markdown-pdf-perseus-aquarius-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7617a5dee3c988740b307aac4e4479554aff7a5312cd6057e19a9803e588729 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149069 Malicious code in ursa-protractor-eleventy-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f19574aa3d14f05d94240a6fce6061b983825c655f6ce6763b33ff9bd4969a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142118 Malicious code in equinox-child-process-deneb-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fbe7ad61e9974fe7ed3d9c4b62c0e379c9a6f7dda87e121fc18ddfeb5770acb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144820 Malicious code in meissa-orbit-bootes-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e2f3aee0366b8961da6c68fcdf85a8a959fc9725a26442353bb2f5b173161e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141519 Malicious code in delphinus-io-aldebaran-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d821ef98f08a1c0be384e1163096d7db814e10ae4f42e0e576ae0d3a45c7e6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145538 Malicious code in node-sass-firebase-enceladus-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a0ccaa43c4ec5a60f07af0942c0be08f1a9c2f1982ddbd6ee2481c161da909a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...