MAL-2025-144856 Malicious code in mensa-janus-chalk-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 943844c3f87ebb8c7913e7fba2bb786c42c182a5f1af9bb44ff16674630571df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145094 Malicious code in mocha-transport-indus-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6d4f63add009e7c55ca249a44aef7ef151f3a1806949fde2c2fc4f7f2e01da6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148565 Malicious code in test-cassini-luna-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7cb101e3f9934846779c5bd46578227d090a1610d7d751f4941518c0b0295c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145207 Malicious code in mui-phoebe-jekyll-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9590523fc729f9ee8a53fcdf3b706a048d0aa8c8fbcd63a9263853608532bf3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149866 Malicious code in zenobia-elara-mongoose-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbf9d9dcf9b5e3cebfd06d89909cf7e106312c8c69aff35e4e6bb17f77897675 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146356 Malicious code in polaris-module-quito-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9382084f565f8462c83f796725627277f976ff86d5c8fed186e7f29c8257f92f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146024 Malicious code in pegasus-dotenv-safe-build-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 106c26131af84fd2a13ede22f176584dcbcea99e0b41cb22247d09674a890af6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148147 Malicious code in spectron-webdriver-xenon-repository-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 620581b45cb7abdf6bd1af267c802b423227a4cff2deb036c36590b0e2e89947 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148450 Malicious code in tailwindcss-playwright-lacerta-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1208ff45dd006a097793072c093d443a2de50d88981ecb93b4111e96b46ba2c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145567 Malicious code in nodejs-hydra-jest-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9932132f6d9bafb954b656330727089d6eb11d9a744fe3333e8dd7384105b5e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143914 Malicious code in jekyll-selenium-prettier-plugin-markdown-uninstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b026af46ec86f7d28b42b47be89d21c6c70732acb979773420fbb4796ad3a0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147526 Malicious code in rollup-plugin-wolf-markdownlint-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 222d123b487722773c7b51ea9a77bce422d0904ebd8025372361611319272dab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141005 Malicious code in concurrently-firebase-remark-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc2bd0fdd87661ce67e74c146f4b7b9cc662fd907f84c6906e86d075e198c677 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145270 Malicious code in nashira-config-fork-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 893df40a746a89d4d64ef239e7ba6265dd6d0d5a966591c11ffbd8f4c401280e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143163 Malicious code in halley-puppeteer-package-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 871c11095debc0e81b502647d58e68f9fb323417086115417a0e62c0f37d3608 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147072 Malicious code in react-bootstrap-publish-concurrently-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40ca53b27778645d89b96eb595882242733d814a4cfe82678efc4b8e67b9ab61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148911 Malicious code in ultra-terser-capella-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b1313e3e3f93703b6b22a59de9916d11ccb6378d4b340b02f531a428f1b8515 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147068 Malicious code in react-bootstrap-native-rehype-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c731557ff748c3b450e7f9a142a04f4182d48cb705f4ec926d465475eb2b7a06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139541 Malicious code in aquarius-nodejs-electron-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 500e348fa490b50191a22ac997e77c101a33648979a11a6e82de022ed88f7b83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149616 Malicious code in xanadu-yildun-kinetic-prettier-stylelint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f0053ae5234c7099173b332a72ca32f5e69106ab132774df30e9cff0b9e09fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...