MAL-2025-141710 Malicious code in dotenv-parse-variables-cache-halley-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87edd49dd5c49c31d0cbf8fd0c1cb15be270a7b24c5375c64ca5649c9779c8c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148776 Malicious code in transform-uninstall-octans-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f86db654307c7cfc379ac92f24a6d4c504fbc65b67b3f390aba1f04cdec2819 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147251 Malicious code in remark-markdownlint-capella-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6de9166b3835951835342cf08b9670e0fdccfae51b57ad4dfa313de94f2739e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142845 Malicious code in gatsby-miranda-iota-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddb652e8edd6e45f3edc03a5a3cdc6e3175c55ad095fa5a223aaf9e27be71c84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148127 Malicious code in spectron-webdriver-bootstrap-auth0-sadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c4dc39f57448875b8be8f6d2e20c57fea021b4e88fcacced609ad7670a9dbd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142565 Malicious code in forever-configstore-markdownlint-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce9deb2f56cf0ee4b3e376a18166ca56a9018309a961160ec32f622f8bc6b661 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145999 Malicious code in pavo-hugo-winston-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bfdf061a2794f8911e73a0f36fd0d80603c5fed1800c355ddc0f4ef97e5a82c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142623 Malicious code in fornax-gulp-cross-env-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0116f63d9e00fd8d009e592db933a26fd7559ef2ec9933865bcdcc325f20b70b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148826 Malicious code in triton-radiant-lynx-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7121cea280f69ec28b05823531126fbded5800410379d2b89f4942fd981ba2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144848 Malicious code in mensa-enif-magellan-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b533e0ae285e04abc18553b4bf644ea798de190bdc453f5ebba48f4bab21c97e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145414 Malicious code in nextjs-dynamo-gemini-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6762dff6c35a79769f64aff5cba24b6d655d7829549908382bff12256f004d89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147021 Malicious code in radiant-proxima-kastra-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13c059ad999a8d2ee6212251a9089d2fc0458dc46516a4c87a9e833bbdf6bf5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147460 Malicious code in rimraf-update-hyperion-astro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 856bb93d73cea29e9602b81c30057a610e50532b6049d7a87ef6b010f8a1aae4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141428 Malicious code in cz-conventional-changelog-procyon-remark-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c732a75d8b1028732f8e692b70aa16efe1be01bfe1e238335f1dc2b52dfa0b0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145979 Malicious code in passport-enif-mui-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5626ffd43d33b0508ce9ce7847dcff8549b1c9574852e9b1ea289574f876d54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142138 Malicious code in equinox-wezen-mocha-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97b388b88203e7d4b5e080a34626aeafadd905f86c6753c0ecce2002dac4dfcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139974 Malicious code in betelgeuse-css-loader-luna-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7654dd1b4c19ad5a052718f02b3a1ede2bb71de999bf5a77617045d18190864b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143224 Malicious code in helios-achernar-postcss-loader-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72aa3bf1e9bab5bd6a52eb05ce85e1cd2626bc73ef8ab794ae82316c4d761497 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146173 Malicious code in phoebe-publish-gemini-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c346999cc24172ed14d568998d9240bf3ca1888626c6c643f1881bc8aba87b96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145654 Malicious code in nova-cli-cosmos-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a6b8ac52d3123426f5132fd67a06e0827677939e3a3e3f9791efae39d16a263 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...