MAL-2025-139681 Malicious code in auriga-less-cz-conventional-changelog-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 903507c242393d0623b15f783488841c20cbebd61009083d00d941960d42d7ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144440 Malicious code in lint-ini-carpo-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 710073126339c59eb7484057356e51e3da9dc45a7611ec43e102dada5d735dcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141420 Malicious code in cz-conventional-changelog-ini-equinox-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 788666018a914e7519393721acb289e94c1dca1a7655b0ca4151130b05bee708 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148958 Malicious code in uninstall-helios-geckodriver-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be46e5e736ed22f6a90e0fd254b6547b4d2107f80b556b56dc10936c3ef7b7df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142854 Malicious code in gatsby-vulcan-lacerta-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ee152af5e0dcc5068bfc21b3ba72197064d1a82c2e97851c04f94b589799f52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145293 Malicious code in native-puppeteer-sagitta-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc702e7575891810cd4a5ab2a9525d3febdae7b77ac6c98e96db321068d74f06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141388 Malicious code in cygnus-upgrade-frontend-nightmare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4efd3889cc38715cfa87373999a9ac8a9bc9757e20af388aa69dd89fa580fa57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140384 Malicious code in capella-css-minimizer-webpack-plugin-csv-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 783b2eb36e9a59e9842d099ec0ea4684a08d4090b6dc64176a70fc96e35fcd4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149856 Malicious code in zenith-neptune-puppeteer-nuxtjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b10a2fd2615539814c75993efda49b5c595a87b90f8e157b39f9e05971922a5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140711 Malicious code in chariklo-rimraf-markdown-farout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8188880b724dfab1146bffc49114e329ee0a92d4ae9911e590dec3f53e07ed7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145325 Malicious code in nconf-prettier-jekyll-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1193615f9567405da1dc0cc9bbb83540714d24ef80292fff0db89a9eeb5db08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149380 Malicious code in webdriverio-private-orbit-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66c34effd25ed669028b7d3c9e64deb8764cf09db0a0d658a5a7103f33a904ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147555 Malicious code in run-script-vuepress-bootes-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83f92fcb02abdf3ddd958606e6a604959cbd6e8afde1cec02a001c1694099bfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145745 Malicious code in oberon-firebase-jupiter-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b771677147a576d042064574bcfeab962f3a687f90f3b3887e89b1b32d193d56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139195 Malicious code in achernar-draco-redis-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a6bbb2ee0d463c7b05d8868a246ea77058a8af3bcc73db7f0edd475dd843324 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149702 Malicious code in xerxes-csrf-quasar-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ece8023c8e2dca4ee014eb30b3c00d6725308eb81dd21a64d4f80a9bf4c6b35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144952 Malicious code in middleware-dotenv-pegasus-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ba0f4941cf5b5883299433711cd0d4f41306c2ad7d878869705eb0d5db5d10d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145556 Malicious code in node-sass-vortex-achernar-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be40ea92fca8b434104a3ed022d80d3230c1e30ce0fe61ab0a4c03d79fcb0060 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148572 Malicious code in test-exec-terser-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10b44c74c5719b6b3b0b0065dc5a854564569798ee2d397b1a35c9236842fb8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146265 Malicious code in pipe-phenomic-zenith-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3484da591110f315d8c1e498f215420eaa5191a3c0274c31ef6498f72a4d239a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...