MAL-2025-149537 Malicious code in winston-zephyr-nuxtjs-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 912f6a1d7d2e2169fb6ca024f4ffec9fecad6da1c2231d994c692d1a85486a8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140202 Malicious code in bulma-antares-update-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da90409dae49766f73cccce1aa6e68c01b0cdeb89095c307fa9ed01a6e3d9d85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141043 Malicious code in config-wezen-nightmare-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f411fe3942ef410ebe4f961f8f7bff70042805c1bd5079c6d8b2122db7e44cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146699 Malicious code in protractor-sass-loader-test-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82ccab95f5e2ce85e46de051c78ad013ca2e19a9d5a01a4ee0a843f29e4cc47d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149896 Malicious code in zephyr-sqlite-pulsar-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d14913edd6b7adb3e586d29443344e3a2618df7c5b9aac366ee0a84441bd20a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145334 Malicious code in nconf-winston-standard-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 086b04cfd8166306ace16ae10617a82ce742c1e4c850c2ad0b65a119cc5913f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139368 Malicious code in altair-subscription-flare-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b71f9761dca3471306127175edf9b552a4c30366e83d5e3b6cd75902c0ef97d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139435 Malicious code in antares-restart-oauth-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 805f215c560af1a4a5acd9aa3e2a2551f566aa20dd37dc969e594fe888df260b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144050 Malicious code in jupiter-bellatrix-version-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9767891eaf351f85b649524ef9c02582915d6cd03f4a573811aea342193db68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144885 Malicious code in metalsmith-octans-update-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f4291d1a26c48c6ab0fa71474f7d1d7ba0447d623c90bbc2eeb32dbbb4ef370 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146645 Malicious code in promise-nuxtjs-umbra-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d6747916a43b67afac536aee936f618012365ded1a68c4b06f03465d4eca2da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146872 Malicious code in pyxis-config-eslint-plugin-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9039999becb8512da6baec8c9a9785c430ce5c276938dacaed4906dcbcde51d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142562 Malicious code in forever-await-despina-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad594bf67a4452e66ab3a9c84a402cce3949517c17403eeb0fe086d90559c21e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147879 Malicious code in sequelize-standard-terser-webpack-plugin-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5497a671c1aebf3e09ba8f4b72a87f5f04dbb1c4d50e8410873150d2e2023aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149175 Malicious code in virgo-xo-writable-norma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a988f0de965c3f72dc8524142cd72070b2d172dec3c81c688da6051723cacfe2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140982 Malicious code in commitlint-exec-express-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfbb3b8d5b4ab25056cbd1b06eba3457a1d6a463bc5d8d8387004f7ac002a5a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143317 Malicious code in hermes-gacrux-meissa-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f58c5e60077088383cddcc226e0f7cff29fea8f77e9046b295e6ede534d6a97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141071 Malicious code in convict-cypress-lacerta-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9760f23e4293d7c57730048e52da340abf6c34e4763dd063f1121ace07245cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143702 Malicious code in io-node-config-rate-limiter-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 930c2a4eb6c0a881eb361c86511cd96aead7d8a166d8915012d34c8a2e936537 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145025 Malicious code in miranda-commitlint-config-angular-castor-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7f9d84401e098721382a5a465d423bed02b2095677f57a2b764c688a1ba0165 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...