MAL-2025-145370 Malicious code in neptune-nuxtjs-axios-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dfb640a07c1b1d1931c574b6445894114b1830e75f96fb8f44699becae8e49a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148253 Malicious code in standard-electron-algol-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aefdcbff234b32eaa809ef06910becc75ac6bd245a7a811a8ceb9c68df4b7ddb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111582

Malicious code in loop-sails-commitizen-resolvers npm...

Malicious code in bunyan-promise-mongoose-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53bb462501821db097afe4d817964df59b4d319045bf01e3471e2e443cae8cfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146438 Malicious code in postgres-lynx-server-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 653bfe654a28358db49904eeb2b34c023f8628805655e602d273525e055557ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148290 Malicious code in stop-changelog-centauri-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fc4dddb8925f9a970aa7c5687caf4439035af040dcd9f9d60675c26aaa27ae6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145000 Malicious code in mira-altair-markdownlint-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a3a9a1d2217dc28fa56bf41ba8f7d16d0b014d78bf3de28b24e6c5a8d48a0cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139204 Malicious code in achernar-spinner-phoebe-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d399212cce44da716b4453d28a2ae282d63b656a01555bce4c82940730649661 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140623 Malicious code in chakra-ui-nodemon-metalsmith-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d3fd1864b9a5129d2c4228d9955e4d3dc9c799a3aa1f4b18ba2932dd5c4fcdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148066 Malicious code in socketio-webdriverio-mira-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6da89110ef3180e4470deb1d394bd94462f73c05afdca30d9e62cd95097f440 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142650 Malicious code in fornax-react-bootstrap-halley-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b32223dacd35ab47cf7c3655704b015d267fd64014fdc9c9368091f01225d58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145536 Malicious code in node-sass-eleventy-framework-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22c439566dd8300ae3d8feff2c2e803e331bc48a29f7f65d2c864439ffa019ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143497 Malicious code in hyperion-rollup-plugin-loop-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71fc72224b44f83c3a8f5dda2c26aa1b2e517794db68c1a486d37563bf0056bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143801 Malicious code in janus-callisto-colors-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fbebae1be459a44b6204915a1718da722ca6919bddd78b6ec4410cd9fb6cdb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144713 Malicious code in markdown-polaris-vega-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae813a6e84ccdb08cd5cb8ebe0295281892305e93d57e4c85684c0d77a016911 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146139 Malicious code in phenomic-upgrade-library-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c6da63fbfa2e892e0a97bd188c12afa9f4a7f7644759a1b77e0465f69de6903 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141828 Malicious code in dynamo-kronos-loop-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1facc111643156c60818083a3221391ae68c90805f74a1411946c0be5cc3821 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143421 Malicious code in husky-loop-writable-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a03548b01ada9be93ed0fb55d38631a5a7df1b6c6fd760240d194a579d9177a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145606 Malicious code in non-blocking-development-avior-deneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b6100a1aca3472a8e1da2302a8ac42b4ea6b7790af85fb94874b2750fd4e98c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139887 Malicious code in backend-foundation-prettier-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6ae1b2df0ed35268fefa4fe80a912ce0b5ffe7c7200b7706078f02c9930d888 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...