MAL-2025-140129 Malicious code in browserify-antd-electron-xerxes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28b73d5108ceb7964a0b3a0e61afd7965a64b68bf06041bb1b24837b5be84fbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145294 Malicious code in native-quito-venus-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22cd3182705b88c0e14381b43792c9118b4bafb5d433ada79eafddb31bd3afa5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141348 Malicious code in csv-nashira-scorpius-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68a3b7aa9fe5d60a0abd4a937eb0407d231dd677987f6edf41565d138dfb317d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141535 Malicious code in deneb-callback-terser-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 125befea8f472118838c92df441d309fd7c4676366f5a833ccedcb1cba6dd12b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140899 Malicious code in command-docusaurus-phoenix-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 996e2a382de928ecfd8eaa5ae6f897a6b8b2ee9a42281ffc74a5128505b36f15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147803 Malicious code in selenium-hapi-graphql-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbe863da11e1bb254e980e820a2b5e550876aaec7d97240823645a418679a9cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139464 Malicious code in antd-postgres-eleventy-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc23735b38462702c28044f1ca9863adc5a4e093748b364fc45cfe6ff8c2caf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147067 Malicious code in react-bootstrap-mongodb-phenomic-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a578d2d7e5537e4e062495c0e294002661cc51aeafcd9ea38025413e2c2c4dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142377 Malicious code in express-ganymede-xml-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2364b90c9a1c2e616199f37bdc2457b095add6f68710b005ba6909f082a394e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144300 Malicious code in leda-vega-forever-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 705ba1bffe46a977d02c92d5251392b47fa800e7294432d8f3f44f3f5c584c8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147671 Malicious code in sass-loader-jovian-axios-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49329d1c8108c8908b1f6cf4dbd3fd17779a8121cd73d24cc2d66e6aa25aa7ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148583 Malicious code in test-sirius-gatsby-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aeaf14e6e10cbe5a3b607dee0e7b57551519225a5dc3ef21ead34231d78cbdd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141023 Malicious code in config-galaxy-rimraf-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6a20b2aacf8190012ddfbab3217df1639b5da0ac41f048534553bde75653cda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143548 Malicious code in impulse-mdx-quantum-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c36caf23a8d04a63bccd9e6f7ffac308c2ee9c62c18e2f3f6e549f580d38621 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142936 Malicious code in global-got-sirius-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3285fed2c03e48f5a42419a8916f260f6b09004934692c06cfdb19a6d5623e24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146835 Malicious code in pulsar-jwt-warp-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd00432a3cb61697434444346db1e5751897caf37a0cf6a2424a28362411bc32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147276 Malicious code in repository-optimize-css-assets-webpack-plugin-comet-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae2b8aaee7f9fe3275d75af04e4b41551c3b458a7c59abf6aaf958977f5d449f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148580 Malicious code in test-sagitta-development-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10c3ec70cfadd3ba402d121641037ebae16726f0afdba17e4143d9fb794b8635 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149886 Malicious code in zephyr-init-json-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b26d5c9a0948f2dc24db080d54ba2a69abea1ce865c17def865d8c7a4d11a833 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143122 Malicious code in gulp-quark-neptune-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c811550bc2be66da51f40555935159a4e2d2f3d2d3de74ee4df0bbed13cd079 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...