MAL-2025-141172 Malicious code in cosmiconfig-avior-got-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80fc7608b3f64152fd30fbfb841a094ffea14421fddfcb55ff46bf7d5f7aea5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145714 Malicious code in nuxtjs-repository-browserify-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63f4787bbbd170be4d0f76478b9c29f56d18d71a9c85eba70f5c44df767291d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gatsby-registry-ganymede-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e91931fa05a511240a90ae81821e5bc78c9adb3a49bdbe1fe9023b326a2ab3f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139974 Malicious code in betelgeuse-css-loader-luna-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7654dd1b4c19ad5a052718f02b3a1ede2bb71de999bf5a77617045d18190864b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147831 Malicious code in semantic-release-loglevel-mongoose-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7d4379a07b9b657c57b819077071e16d07701bbada1f2a463dfa01a43464e28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141962 Malicious code in element-ui-ceres-aquarius-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e54814dfe23a781cb3e4bd646a7076f4328a131fa2f85effb56c7c81ba91163 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145602 Malicious code in non-blocking-apollo-proxima-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 075b4ab62f509004731e1c2bd1277e8fbd04dc6618024de17b3e217fe8e76e7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149185 Malicious code in vortex-norma-spawn-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d9871526da17ffbeb1990534998c1ea3e9b0812ae4bbd2867c1b095eabba085 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149385 Malicious code in webdriverio-telesto-equinox-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de1350f6b3fe53b352c5f1540c2f4c83adf90f698ea739e790969583955c89fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145628 Malicious code in non-blocking-tailwindcss-virgo-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9edb149950bc1f8e57d253ad39963008d2ce31b5502a98f0012b06b0e1b765f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145239 Malicious code in mysql-babel-cassini-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40143ba548c31793f042cdf340fc83a0f912cc7d59d8f0b4b7004398a8425066 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148972 Malicious code in uninstall-xanadu-weywot-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0122afbf15a68b758872c3dc1ec2719a1f3f0ac718b484d440bc721e31346f55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145427 Malicious code in nextjs-xml-yaml-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0671b2be9d6650ff8c43e98f38d0c53b0646276240a6657802b68ebbc5153381 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146803 Malicious code in publish-polaris-graphql-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc9622c156d137c3da2d50e621520c1214571a89d839cf468ef5f1e2e5d6d8e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142638 Malicious code in fornax-miranda-dotenv-parse-variables-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc5daaca5d8d981787420bdbbc174f4e8024aff81ca636c0c7c87a2a68d4f315 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145145 Malicious code in mongoose-altair-carpo-release-it (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 098ba0624983e816986795af3e5a8fbdfcc6ef8446ff26353af8a45c6ef0a8fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144131 Malicious code in kastra-run-script-firebase-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc401c10920d96d579d2722526875bac5f60943ac975fdf0410ecc87dc3389e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146295 Malicious code in pm2-cz-conventional-changelog-config-release-it (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ed9aa0940c57ef379d7536b1ad377e6e954499394b1631b318f3b9f135f9184 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140368 Malicious code in canopus-phoebe-electron-builder-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36eeabd19bdeac8a1ef874d116c625c345e5f293b115ed04241d7f4b9e3d9df9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142738 Malicious code in fusion-jwt-eclipse-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f276ba37349ef51c2496f3657d01bc7a3a3d0a9152a6d37a144b42229df1956 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...