MAL-2025-142396 Malicious code in express-xanadu-husky-lint-staged (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5b0e06559e846c241f796193a8640d2e67285bdd466e9b70508261a19b3cd9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140364 Malicious code in canopus-lint-altair-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd67e9b012ad5296821bec49dbaacc8d0ba854d8356cd572e855d31cd9bcd94f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144176 Malicious code in kinetic-lint-staged-commitlint-config-angular-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb0ccf783d99e2f174768c7a2d194db3957b6b4005ac8c4e3b73a310d979249d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144446 Malicious code in lint-staged-auth0-blitz-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9c67138ee808692160a48ef7c74837cf18dd944b8ded69410c71f20c4277864 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147063 Malicious code in react-bootstrap-lint-alphard-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3684fd38755e805195dd3647625892859bfef3ea8e3c810285fb6382548a89c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143450 Malicious code in hydra-pipe-lint-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf8bc7b83100d9034cd6ba13dcffc904a47fe59fa5d8bfe9e592b2496d9493a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143111 Malicious code in gulp-blitz-radiant-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2272dce106a80652d7130e9f69d1980ddc9bc530edc7cba63e8fee9d913ef8b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143095 Malicious code in grus-nashira-lint-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d055b3ce56e60be0bfa4969d7cc1a5e2ffb608a61cdf2cbdfd339fefa11ed75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144472 Malicious code in lint-staged-xerxes-repository-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9139a900e53769bc31e4a3c68db8adba88b9271bf86ea79fda3761e3b0954062 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144474 Malicious code in lint-toml-janus-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4d74b1b010c2a53741c5653bbaf376160ff451dbfab3dc1da0141aae6b48afe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141508 Malicious code in deimos-webdriver-manager-public-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dc1847b052c14b0eca3479e9583bc1ade4230f8c35df49331801119ea3a3f16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139550 Malicious code in aquarius-sedna-lint-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e39ba57b7192f42133b9d75ca50578b733c485b36983ce205e871e9a2c23047 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147603 Malicious code in sagitta-lint-staged-toml-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fca59636e0d9c48154390c3820e7c28ac94635107dd709d00f284b720b8ab5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148275 Malicious code in start-lint-staged-antares-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65ca9dec5af3f6986b7abaf03d78477121b87d0e5875637fd40a490404dd5368 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140277 Malicious code in cache-npm-terser-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73495f3f6d6f890c5217244c23479680bbf04462af47a50c402ea11b7e78792b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141509 Malicious code in delphinus-altair-farout-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3dec0a7142346b708feacb4f333b65f902175868929901f20759b12f56e8da8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144475 Malicious code in lint-winston-browserify-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f6d475b0ea7203ceb3c07f5ffa5db59ffbef110b3585646afc0d02eb097dd7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148166 Malicious code in spica-lint-solis-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e0bc74a9bf11f5ae9f2d2951d34d018a956cf3d25f4ddd5b84f47c2335f0a77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145133 Malicious code in mongodb-materialize-lint-staged-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 143e480522b9635afef9b96a04379caf8617f11f48a49d6deb174d2845d3e48e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144466 Malicious code in lint-staged-start-electron-builder-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5e73ecafc9499e1568b2977d0dd9f18f353acbc15330cf67c197d36a5ffec75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...