MAL-2025-146501 Malicious code in prettier-rehype-aquarius-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d2d565d78ce155f0056b21379cd9365f51675c882544c533da05a653b027449 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146210 Malicious code in pino-castor-titan-farout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd8380998eb6ab5ab3193a5728bf932f73e6aa50cafd200f74fa9f30a8daf4e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148105 Malicious code in spawn-registry-hapi-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ce6c4931686578ab6925d8495679d37db70997bb5117ee12b15a35a4b0af5c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145538 Malicious code in node-sass-firebase-enceladus-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a0ccaa43c4ec5a60f07af0942c0be08f1a9c2f1982ddbd6ee2481c161da909a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143466 Malicious code in hyperion-bellatrix-carina-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08d1bdf4a11c0a392a600e12d08a06142d23cf402e33d975e8db903eb91dfa73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143890 Malicious code in javascript-scorpius-global-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a295c603b76a38d618d9f50be6f6317eb946aa55b04eefa49bfe10b3e03fc9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142386 Malicious code in express-module-dione-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 746ff1eacfa26ef921d0bf5f4c8534d65842edc5283b1a692ecb6d1364145442 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141909 Malicious code in electron-builder-nconf-warp-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7ab9cac20e5a2bc0455289471d23484573238aefff23152f6ba6ad37ef8acf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148337 Malicious code in style-loader-radiant-wezen-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d58f33f057d544f20b90cc7eaf4e8efdaf877ed6e74e3ec3a817441c19fe082 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146886 Malicious code in pyxis-perseus-release-it-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04b04e9c06a4cc4e95b2435dbd3567c0e5ee46522a071221fb8a3640bc33a207 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146567 Malicious code in process-sagitta-public-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9486da0eab8d7a0b1571a979e39d9cc7458f2cbae2f6fc67958c37e403b7af7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147918 Malicious code in shelljs-library-development-commitlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de3656af8447eaf132ade4da48311dede7839d72f50c653ff9c19ceff030aff9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141314 Malicious code in css-loader-relay-element-ui-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd3a2b6b8eb1dcee62835621683bfa4bac6dc855bdb77725f0cb058fccaf4ced This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147541 Malicious code in run-script-charon-rigel-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6b81c14674542e9356c3817bc7e5d57607720d23252ff3006a97b314cf0b872 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139988 Malicious code in betelgeuse-magellan-webdriver-manager-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84557d09f25a2889283ec25f763cd3d1a8eed39b621cbd472873b3f298a4002c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139271 Malicious code in aldebaran-charon-pegasus-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 808b7e01fc3390efda5a9efa37e7d1917a9fbe55cd61b8a33611ec40ce69b373 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146059 Malicious code in pegasus-terser-mongoose-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e082163d5827b000c5b136c6eb51be24e66954f12fd324992aae6f786120cf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141069 Malicious code in convict-atlas-ophiuchus-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3cf5a6cfe972b72ebb9d35d0e9dca13f2661913f52206351634dd057bebb6c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148232 Malicious code in sqlite-non-blocking-native-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4bb8d693502367467a865250306d6251623b4fa2b1c23100452f92000dc12d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149250 Malicious code in vulcan-query-vulcan-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e276c9a3d9ef975ca998a95544897408b9807e3f2b1209e34880c529e40caa80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...