MAL-2025-148329 Malicious code in stream-run-script-got-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c9898cba39bc92128e8353f6298e4073eebf5b59f8585aa54ff9d6fbc17669a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148902 Malicious code in ultra-node-config-parcel-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d29af01598b9218606d15210c2d0adf701d386ce92a2edc0b8179bbd099a3768 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142312 Malicious code in event-fetch-epimetheus-writable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d41d7ec23ccd2fad63599eec79ef61acb71decba3e9dc176f355979acc910918 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147652 Malicious code in sails-markdownlint-husky-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deac6805d708e640aa50b6d65b29fad2ecf88b4cf854aacaa08dc114863dfcc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140074 Malicious code in bootes-deimos-tethys-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bf8276b237457929553c4b5e28b51cc0edc14043dff26620640248f1d6fd96f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146870 Malicious code in pyxis-antd-venus-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59cdf93349111eb5fb097432eab96ad486bd16e7b12600203a2e5c3fb9b07aa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144292 Malicious code in leda-scorpius-fusion-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95c2368d5e556c53b4ae55edbda2692a0cbd772956bc8ffd3bdd54d97d120dc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146664 Malicious code in prompts-hercules-markdownlint-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b07b854f4be56a57ab029d933b752ea4abf4a14098042f73d4b571fd40263a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147611 Malicious code in sagitta-publish-less-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e31faf24c46477d774d93db7d78b3c39311f6669c9cefc0ff371546695dd8b89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144708 Malicious code in markdown-pdf-sqlite-zephyr-warp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 195291aa189c6bfdaa7f3956ee1401e30637c563743c36d71d9c6e0cd6aa28d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148734 Malicious code in tool-fornax-polaris-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1049392870b38d519a3ecf2f7d0f83d0a1b5d27c0e2622d309fef12fba1118a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148592 Malicious code in testcafe-equinox-rate-limiter-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 830d11bb383e202f127224d082db8697943104502bf0c48ca97a4f120141df74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146670 Malicious code in prompts-mocha-norma-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcafad7150ac059d1088731e36c7e059264a25f901b0fe893009c275bfadc86a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146319 Malicious code in polaris-aether-andromeda-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7009e80bdaad4a73c45ee93f70c3e3863bf048aabe60ccd5a236ceef5e5ff17c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140452 Malicious code in carpo-semantic-release-kaus-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77f109704ac2f7e249ef4083f207485a8d26ee826962f8c0a3ac0e7a23f2f4bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142562 Malicious code in forever-await-despina-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad594bf67a4452e66ab3a9c84a402cce3949517c17403eeb0fe086d90559c21e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139730 Malicious code in auth-radiant-kastra-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7da4a931fc7d11a9f6c84c5f2225ad0970d868b34bbe685c179c1601b593551 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145117 Malicious code in module-standard-ora-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88755bf75283ce7dd367f4f6818bef472087445a91b70eff84ecce41e2356c18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140805 Malicious code in cli-norma-celeste-less (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d1f52e88080d69c6d9183e4069ddcd50e96fdbe3fa96898b78f3491dc2649e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148089 Malicious code in solis-spinner-canopus-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70de15daf42e5880fe1aef7c23ceaf254db562fb9cb058e44b29f7c137f04ec1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...