MAL-2025-147169 Malicious code in rehype-galaxy-hydra-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae515cabdd377dc8f6e72c0e9f506b2e5ea246dca2b7ee74d12443ed287d875f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143573 Malicious code in indus-perseus-publish-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a4adc8449cde1c265151055a6b6265cbee2a4f80fae639c8a6e00f6778daecd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141981 Malicious code in element-ui-radiant-procyon-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 424d9e1f0ff447b5f9d760005a5ce6aa0408f107310e362b55641a9b2accf627 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145566 Malicious code in nodejs-grus-gacrux-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 992d9509225ff4662c83cd02c736feeaf3c3c0e546718d9dc8aa3474d3e661c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146795 Malicious code in publish-miranda-hugo-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d719f466203ac256381e61c67b5979ea11cc2ca7278330ca055096e9ffcd71a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148766 Malicious code in transform-jwt-vulcan-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c80384b9ca3ac80bebc0293067f2180a4cc09a4a9a27fdbc9006815ddc60ae8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145578 Malicious code in nodejs-titan-thuban-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8539e22779886967de1cf80034d2581c2dec1fc51ee6b47274fac4b08eeb6a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142675 Malicious code in foundation-vortex-semantic-ui-astro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 326fc01021205b3e567805f4fd529b0b14559710cce5370242b5556050f9648e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139239 Malicious code in aether-procyon-corvus-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c8123898624474af520819d1c6b677e6d1936dc7da4b7636be947bb8d4405b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142330 Malicious code in event-transform-electron-builder-draco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ee0ce5601f068a49bf40ce75803158592a2ac0584f58eab0e797b2ca8f76259 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148722 Malicious code in toml-transform-colors-uninstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91d70cd2849f53b4ee927dbd5ce6124dc606282f9efcab3a38d79e9435a06b6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139820 Malicious code in axios-canopus-kronos-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48ade41d63c7f9d1622391ff19a184cc9d7b30bf4422aa034da1f374435842c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144835 Malicious code in meissa-stream-commitlint-config-angular-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66bb4c4f9514a26d6e113873599c5e7369b845ce22dad41407a0ef16cf60eb7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139328 Malicious code in alphard-jupiter-yonder-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 991f0d789770d2f73f9d18deecb4714e677d7f117babb9d524dd62886c2f791a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141837 Malicious code in dynamo-sequelize-hermes-playwright (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2e59e09926ad401601fd6a02322162da69959133ab0d2524b3a52697d3929c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143949 Malicious code in jovian-hydra-chakra-ui-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e11890f1057cd031f348255b194e3c7423681fc7aa622fb91bcc95d904fda02d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142830 Malicious code in gatsby-antares-metalsmith-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0608261a0fe9f89fd63b28a2f5ae4ea7d0bda75b02105c40feee677bf54f4ada This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149590 Malicious code in xanadu-centaurus-scorpius-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f3bcd92f5223ed3455308cd868500f9582e6abe1081bf9975ab41468d08a549 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149691 Malicious code in xenos-thuban-resolvers-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50c87583f813bf3b289010d2d1fe63c705d1c7b1a54fd57decd0f17f40b0c5d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142951 Malicious code in global-toml-vuepress-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6a8cdb722e96e67d2348f504d26379d9b7b8862df3266e39cbf1756954a7aa2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...