MAL-2025-140362 Malicious code in canopus-kronos-arcturus-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20e4d96be919d586b8b15710cbae4a8827d448f68bc93f2af7fdbd94ccc46b34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144067 Malicious code in jupiter-xanadu-optimize-css-assets-webpack-plugin-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe2af6812199247ede8e24f95898a6078f72f1f090e8bf50ecf30c6f91ca063d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144311 Malicious code in less-html-webpack-plugin-phoebe-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6233d66c6ce8a24ae4549b43abe8ec5046cc8b0a19973a0bf6447ca912d0408c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149771 Malicious code in yakutsk-init-neptune-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a512de47dacac8b7e10ad032e5bdb245b16bd64d64ebf701bbd3adf8efbc71c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149198 Malicious code in vuepress-query-private-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88b06436ec479094556170f75890c6cff8e223b7802f7fb67abf0df9a8e976d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142403 Malicious code in farout-chromedriver-aurora-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b98547be9e19d5bc0cfb5d20c3f5dcd85c8c38d403eb7042af8d27946d36a4bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142383 Malicious code in express-meteor-colors-chariklo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d669fa9c44fcc67de8380cae4a7c1630c7f8dd8f2b7ce7cfcc91f937256c1721 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149617 Malicious code in xanthus-achernar-xenon-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0307a9e41a3fb63fd942f96def2c8064a5c7e35505d8b5e4a2d76d15a67fcfdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142126 Malicious code in equinox-meissa-europa-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 971426dab5e1c8b4d75b97a1da56d0a5d22b1e299d60a76669042d42416a363e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142145 Malicious code in eridanus-ganymede-hugo-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f8dd49354124306d6cce53a0e2081438a175d153f93a53913c5eb90407d1ea1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148781 Malicious code in transport-commitlint-callback-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f807ba3959fb8ddea8aadf86e62f2917a3c17d64df2cc7a46f80fb9868c3d97c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145574 Malicious code in nodejs-proxima-link-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63188598f74497a2c47b3cde3e375a0268745c99100ec6cefb8ee6a96c36a71d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144724 Malicious code in markdownlint-phoebe-aquarius-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97bc05a74a579980324723e78032930d587d6d67a1b120c30a59e228eeb4a720 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141621 Malicious code in development-heka-fetch-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fc34f1ad0167ae7f5840b129cbff77369019cb49cf1497dfc4cd4c540ecfb8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140323 Malicious code in callback-webpack-halley-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70a248511661d42b7e8a90d6b53620f06f00b4b181ee0d2c135f7ace1fe1b691 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145367 Malicious code in neptune-mongoose-kastra-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43400e1607f9419af64ffd8712bb415e4aa32335781b992078ce9a22e64c58a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144523 Malicious code in loglevel-xenos-child-process-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89afd7046dc02e65e205937635f26c7474c3f5c9ba7e19863cb1fcd4455e0cd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145116 Malicious code in module-slidev-webdriver-mocha-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fd99e840b0e0e74e3caec7e7ebf1b86c170b0f4a4a307f300443e590e3d09b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143089 Malicious code in grus-child-process-server-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b28413cef90aca4f8fabcb9fcb9cc4c3737e32a1247520c569f1d849bef559a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146754 Malicious code in public-auth-dotenv-parse-variables-prettier-stylelint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09ce0a0ece80a0f062e1bda693c998505ee43a150523b272c46e37cbd25f5383 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...