MAL-2025-147574 Malicious code in sadr-process-ini-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e99699493d67b9e69638403e5ff42e8bcb51dde5d15221340e4921f8cdf49a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140541 Malicious code in centaurus-bootstrap-callback-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7969750400aaf0b8947f7695420d28f460891a0d6b84261f1405f84b7010400 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140357 Malicious code in canopus-ceres-start-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed6cf436c849d3590009c01fd3be1f2292f845175f0191375f358643d24f99d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148845 Malicious code in typeorm-fornax-centaurus-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f30755572e37c868fe80982adf7e0e1b3a3c84d267e86cf691003fcaaba7c0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149344 Malicious code in webdriver-mocha-chakra-ui-neptune-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bae6e1365b5dc4da2b0ae42bd53023871dadfd16a3dbbf6c55fad3f62f4e8df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146478 Malicious code in prettier-plugin-markdown-browserify-link-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da1a8c727ac3b13bfebcaf88f918fb328f6db6db6c868976d5d5db78df819ad9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144832 Malicious code in meissa-semantic-ui-javascript-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b22af8d1e581000784e2dabcaa9430a24b2c5e18069e1425b09bb18d86a7206 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146871 Malicious code in pyxis-charon-neptune-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 556ddeb88bf7a9fddf1bae3466a20bdfd45f4c606551a5622a2d5157c1b8e689 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142320 Malicious code in event-prettier-plugin-markdown-halley-jsonp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fd30929afe52bc277b4d8b06cd079e5fbc315319642889508b0c4575f162821 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148286 Malicious code in stop-aquarius-barnard-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c424cf28debce1410577b469e5847a0ac3aa9b77d2504b807a03608e3d501ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141393 Malicious code in cypress-blitz-typeorm-xenon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7fd9a3511b91a8ee654005a6e729410f36be69ce140d11fcd0dc6ebdc400290 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144497 Malicious code in local-run-script-ophiuchus-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bb8344fa0bf708a5d389890c5264e3d60bb553c221469e2dcda9bf9d1a03281 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140256 Malicious code in bunyan-sirius-nashira-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a80839ae4b1e9d6b67291153829fc2219acb1002afce7fc3726e1d9503d4a5a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145304 Malicious code in nconf-babel-leda-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fd58af62c423f22dc1dd348dd58260892dca5d44f791cf0bdced57cc4e3d30c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146954 Malicious code in quasar-jwt-chariklo-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58e96037d1d468c6657b8199569db480a0d764b88149d9dc46c87c1d8bfd2d5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144555 Malicious code in loopback-kastra-soap-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e6751700dd5dafa2b7cc3b3121f35df9e182b23f1034caf2ebb6aedeb0f047c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140602 Malicious code in chai-procyon-postcss-loader-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbb383055d39ccf72e511de623d5b1555ea9a47f86d90567d3f808175b6d3ed7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146972 Malicious code in query-middleware-promise-development (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 044b110d5059a083b5f257a7ddf21a013cab764059814d3d97445da282705cc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148539 Malicious code in terser-test-unuk-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ace42a4c3e8b7268c7fa20d143fba3393fe9fd70a9bad5324be5916b4c15d85e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140479 Malicious code in cassini-winston-helmet-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5810fffb3265738c79fca34580cfbce263e1c4b04d3691104bfc10e5393c5a52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...