MAL-2025-145025 Malicious code in miranda-commitlint-config-angular-castor-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7f9d84401e098721382a5a465d423bed02b2095677f57a2b764c688a1ba0165 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149735 Malicious code in xml-start-cosmiconfig-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91eedc1264661a331bb5bda407d0b16cf6ff42036d0c67981b64050be0744e34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140774 Malicious code in chromedriver-husky-flare-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 427eea3861085f119e61e49f48fcc8a63b170484eae6227054dbe4fe1b2baded This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145437 Malicious code in nightmare-flare-karma-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3ecd3f80227f98c1d0462c968014d6de029b6da6be6262f1068d0597315dce5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140388 Malicious code in capella-got-norma-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 378a90563bb59c066009d1f716b8397f7a9794d238c740fa8209ae523f935e56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144937 Malicious code in meteor-spectron-remark-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d697b4703e1c8d925411ee9461b6afd064f73b0e033bdf34d42c2627b189fac6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148660 Malicious code in thuban-parcel-fornax-nightmare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61a2162f7ddcda39a5718acfc616b26db22ce8a0e0da7efc71531e95185cefd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140605 Malicious code in chai-sedna-configstore-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8db186b19b6b9034186b75352f2f8ba47791d89f3232c2472ed5c907aab10f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141099 Malicious code in cordelia-enceladus-cache-helmet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 778edb01bb85f7345c2bac7bb6151befe15e9172b50b7b58d43562cb74c2466f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146870 Malicious code in pyxis-antd-venus-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59cdf93349111eb5fb097432eab96ad486bd16e7b12600203a2e5c3fb9b07aa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148592 Malicious code in testcafe-equinox-rate-limiter-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 830d11bb383e202f127224d082db8697943104502bf0c48ca97a4f120141df74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144400 Malicious code in link-babel-test-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05c03bc6eb57af4be938384971609abf1c0bf21731f0b1d63ec7163677493ef0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147618 Malicious code in sagitta-sirius-express-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f087754848ecd4b5049a7ae0f8fba20fb2b743ebb27991b80416ff6cea727a76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140826 Malicious code in cluster-geckodriver-child-process-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01143fc1217691fde402cbf013f7cf34a528ca4f781075c77d5cee117f18c1ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139923 Malicious code in bellatrix-antares-halley-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7459668e9fdfe7e25259ab0a5378deeef5aab39f018a73af01ee396aa5f1f18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148524 Malicious code in terser-jsonp-version-uninstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 963e0198be8f4f3709c563091335404fb9386697b48f792e40d1e4ab20e22401 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145147 Malicious code in mongoose-atlas-jsonp-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8bb3df50a1c12820fbf37a28bc595d1401ac0562035b52bd7481da4963b98ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149804 Malicious code in yaml-tailwindcss-hyperion-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21873df11411c0e983ae620ee75aa54dc13b86929ca05c9b2f03b64c18324d07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144732 Malicious code in markdownlint-zephyr-perseus-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2635991b7d8ec4de019d0f6887e3fe94ceae95748053607f691bf9178543ef21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145763 Malicious code in octans-blitz-meteor-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a4371531f66e76c21381869af17ca3e23ae3771e2f22bc30ec2763d6dfe81e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...