MAL-2025-142112 Malicious code in epimetheus-uglify-js-figures-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ba4c6c38b08a1edcc6330d629aab361871c08e39409c9f9c85f472c1eb1503f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146717 Malicious code in proxima-helmet-schema-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c995599cbe52eeb9442e68f9fe9ff41d1f1b8074946fbb0b96de6f120630700 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147566 Malicious code in sadr-loglevel-bootstrap-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6389511cc6288738f716df02c33481d1278cbd9fcb41a5db671475496f03c9a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139636 Malicious code in async-procyon-webdriver-manager-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82623baeedc62747604851f9eaed098914336c250e96eb832088f7207a106c85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141322 Malicious code in css-minimizer-webpack-plugin-comet-impulse-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2036bd03a92e217ea6354ba65928a8ff78ecbf6c59fc278e254c0d1d3153fa76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147005 Malicious code in quito-subscription-neptune-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70002200c66b5b4cc0f28f3f46ad6a34726cb88aae438ffc6a091fe5ed4e7af3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146103 Malicious code in perseus-playwright-ini-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed04bcab08314eefd54ec25d25b978908a323fd77c17eb836416092414d907fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146779 Malicious code in publish-child-process-halley-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 372d84cda77d894b3852a08cb80f633fcea5878af8dcb2e77b36f8b26f4e35e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142736 Malicious code in fusion-init-helios-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f76cdfc161d1d1478513f97b5ee9591ccbfda1519328392d6c0c8fac08f36a15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141078 Malicious code in convict-loopback-ganymede-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 104427287b6201291737d63904d566b88badc27604dc3788a575b97b3de23343 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142897 Malicious code in gemini-enceladus-thuban-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e8661679b1077c5c21fbcd3671502a87927310f0826b2a9a9638a8362b6fc53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142654 Malicious code in fornax-tailwindcss-start-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb8582cad12e6d58be2b1c5f1fff16e754192a62b29892c049e46a0efcba4b6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143556 Malicious code in indus-astro-materialize-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8474eedfb266d52c3e1dfc1fb588e3b8fd8b8541a1b2a946c7249acdde5c6458 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145244 Malicious code in mysql-elara-kinetic-pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92c00251c250b3e76556a1a9832ca26172cfce2fd6b2a02f3b8d0b9c8b6994a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139515 Malicious code in apollo-hapi-soap-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07b11768cae9dce591b19f0b3aed2b0ce4d5df76c62962d608ab48fae2fe65d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145637 Malicious code in norma-cressida-wezen-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c325aea0435d135ada4d781fcd39f53000ae8c2fce613106b6a0e4fe51ce8a50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148755 Malicious code in tool-stop-magellan-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 425754f6af251723808e87b0e68201bf2b4a32eae0c5a5bf3b342e6f57b62f06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148188 Malicious code in spinner-commitlint-wezen-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7248b099b94049bc225949d94b135a1b4daaf5102e8fb556c93c3a3b747c13c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143631 Malicious code in init-solis-gravity-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dce95d071c98aca7f71a3d08c4ff496456f80f37ec606612dbba7ad6d14bf5be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146021 Malicious code in pegasus-chakra-ui-spectron-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7be2d5896071aa511b4fddd7bc90af4dbb750cf4dc6aae32460667ef98b4bb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...