MAL-2025-141091 Malicious code in convict-sagitta-capella-remark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 243af60bcaefd4a2f191e0403851b712f8cbab97e1be2ea0df86e12c71b9d373 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144750 Malicious code in materialize-postcss-triton-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e806cad24fc90b3611ebe78f4acf26d974be1fca9b6f1a37555a0267101d4ea9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144353 Malicious code in levels-eclipse-await-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f426ac07a625c3570fc4090814ed7b621a2e38f39385e657350218d08d039bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149798 Malicious code in yaml-nodemon-spectron-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89819993aed0670a8dded4f811d832852c1a52c89aca9af1031cc6d0bd7ca03b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140997 Malicious code in commitlint-xerxes-deimos-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58244559fbbee2ea59e05e1acb575ed0ce8db9e247dd3b432925e94666a5907c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146390 Malicious code in postcss-loader-commitizen-foundation-xenos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3544c8a28f043aa9e67e4ced4509db2908ad6675975cdeb4198f6d034572831a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149218 Malicious code in vuetify-polaris-jovian-norma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c833e9ad5840b2bbd0c8b479e1f64df65a6d93f501cfe07138ccf463d05acb7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139330 Malicious code in alphard-mongoose-ursa-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 322015036a324c266efd49ce30cd139258c87d00c27958a48d08ff1172e2a08b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139797 Malicious code in await-dynamo-europa-development (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9d6d85e8e7408451d3696998f145b53a266be50a39fc04a312b692cb078ef01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139192 Malicious code in achernar-cassini-antares-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c926c6238992b2efa80955805e330ca4559e9c8936091d46b8f110c4539464f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149854 Malicious code in zenith-lint-local-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec74ec276f823fa984673f06be515e340ea0f44cfc759167248cdfee29be770f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142641 Malicious code in fornax-neptune-telesto-farout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44fd2f930b41dcba2fb86f7520b301510a5345895d0d37918b00f721db9fd953 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142885 Malicious code in geckodriver-titan-weywot-nuxtjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edaed3bc26a79eac172ab1ba313845fb14e0cbaf5284b4847aa3eb43b3d53c2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140154 Malicious code in buffer-celeste-prettier-plugin-markdown-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a0b93c3ef015e6aa400f4106766563254f0e2fc58bd1dff4a01ee9921e39aa2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143931 Malicious code in jest-prompts-node-config-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9728734a942a533c415e6987fd3fa55102d80f96c4b586d9acd545f101f9cc5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145528 Malicious code in node-sass-bellatrix-commitizen-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea8300cf67a6d08ef996a5dd67ad197d2f9e90d878f87659c59f6da61608c421 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145609 Malicious code in non-blocking-halley-pm2-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b550f4c21432c547db7803570839488aad6e6d7d907e29bf2f2bca16cbeed09a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148600 Malicious code in testcafe-promise-eslint-plugin-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e789f5a4106a260a4b5238e8e175bd5d43201b8266251052d7dd22154b8b9255 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145276 Malicious code in nashira-halley-eclipse-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92aad2c8661c92e2faf142d7e97db55b4c9eb503c256a5cc5aa3b8c84acab377 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143173 Malicious code in halley-xanadu-rimraf-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98f36f1b7e62ebc7816dcaa02e95bcd9db3333ab142284de4d97a1321497a229 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...