MAL-2025-144044 Malicious code in juno-webpack-ceres-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 489f77539ca50b4cd121834f2c9ffd7d72dc229c148b983939f45728486a3dda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143829 Malicious code in janus-query-lint-staged-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f64ccedff80d3729b764e6faea457b0f2555770efa727b262d40f26ce5ebef01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148611 Malicious code in tethys-betelgeuse-lynx-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 109285f2f1e983b64fac27c958699ebc79fc2ad92a4eb353e7f25c5110e0df5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141562 Malicious code in deneb-warp-foundation-levels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2da07786b07f1080bf68eef9f1d567aa7e1c425ad990827531418dbb2973611 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141534 Malicious code in deneb-bootes-postcss-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0946cdea14d211a37908ae44081e7d4160b2eb486139d669e4b767981335152 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148995 Malicious code in update-dynamo-cypress-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b14d525088e624aac95636d8b8306b25a61a15d84bb34c74a89c4e968b2ba186 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143372 Malicious code in html-webpack-plugin-slides-bunyan-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a6907b6287280cdd51be770f95a0016abb5804f689916408a57db5104aff9b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144408 Malicious code in link-gravity-cache-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bb48ae50821c55007a4579308b3d0c1e0ab08fef7b5c78d81a107f08d1b8512 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147150 Malicious code in regulus-loopback-gravity-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e2e33d869936b58fdbe291e2439f8c32c80eef4c3f563b534efb78ad4bc3f95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145455 Malicious code in nightwatch-airbnb-deimos-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f752fa734e2490fe968e90b4d52adc3051e7439e54ad5906eb124cad4812e8eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148688 Malicious code in titan-node-config-janus-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3953560bbf546385e3116d1295a495a96bf128ad40a003706fa0d5cb2c8a6d96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142906 Malicious code in gemini-mongoose-mini-css-extract-plugin-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62ff2d997a3921a2cfcfc49b398c173f42620dd3ec2c30e47b5b83e91b550b84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146601 Malicious code in procyon-kastra-jwt-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27adb475c01b655934995cdcafe5af454454fbd4beeed4ca694c1c812cbac919 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143252 Malicious code in helmet-enif-gridsome-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2adb39d8e6ecbba968ccf3078cdaee4dc1337a58a7ffa64e62d214da2649c403 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146861 Malicious code in puppeteer-prettier-plugin-markdown-loop-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c09e89a9ea92244153433e928b97428ee04b1a431d3f3fa32f58050b91df40af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145260 Malicious code in mysql-pegasus-restart-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e7009905cb8f53560de954853c4d20a219c322493bc7f7bc00c89373ad493a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143389 Malicious code in hugo-io-commitizen-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b14422502a986da3f3e8a3e58d27382f380fdb312eedf3d04e62baee24a4dcd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140076 Malicious code in bootes-despina-capella-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d23d6d6dd2fd50fbfb69d2a5c2e9d2d735e5bce93f882407139e9ebc1e18f011 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145823 Malicious code in ophiuchus-janus-middleware-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3afa7455ca0f55d55daa0b481bbe00bb64a2bebf660d267ff2e2621bef86843d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141040 Malicious code in config-sync-stream-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 272ae80d612727261195a18032ef87b80a908a41c49a641ecef28bc5ce12b63b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...