MAL-2025-143103 Malicious code in grus-taurus-xml-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e782c2cef1bcf90360829c12b7ce209eb5f9d611d67600c686d34187ee7b16e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146754 Malicious code in public-auth-dotenv-parse-variables-prettier-stylelint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09ce0a0ece80a0f062e1bda693c998505ee43a150523b272c46e37cbd25f5383 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142199 Malicious code in eslint-config-galaxy-postcss-loader-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 071d87b05998a03cb70ec6cb8b456a568c2d1826fa8723063940c54ca424a885 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143251 Malicious code in helmet-eleventy-eclipse-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7d31b4ffee6662a3c1074ec7d4f79a4fb5fc5a5e087c4aab4d53c6054de2a4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148284 Malicious code in start-ursa-nodejs-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 593bc23c8976e4718436bc2e85ed27103ac307c4bd87d7308b8a3d041620871c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147128 Malicious code in registry-fork-terser-webpack-plugin-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e5f80d581068875ac320615ae15a242874ae033d46442d41454a22228f38a50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143456 Malicious code in hydra-semantic-release-flare-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6866ad123405c4b431cee48bd7065874421c495ac22c92bfd751939f527196f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145116 Malicious code in module-slidev-webdriver-mocha-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fd99e840b0e0e74e3caec7e7ebf1b86c170b0f4a4a307f300443e590e3d09b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142632 Malicious code in fornax-loopback-google-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1453791ccec0e6d9af3bb03731b15537c00689db44a6584eef16befedb6d447c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145355 Malicious code in neptune-chalk-html-webpack-plugin-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69cd6f6bed9776d6240e81efcaf980f3e86f7f36bdacffd76d292c2d9397deee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149198 Malicious code in vuepress-query-private-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88b06436ec479094556170f75890c6cff8e223b7802f7fb67abf0df9a8e976d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149165 Malicious code in virgo-proxima-markdown-pdf-mongodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f219bc0b48937bf3537bcbb91d9f436e7399d6db994afe3b12ca393ab705e1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ursa-reveal-md-antares-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc48de705e14b0fc19c38e6070047b60ded65999d88f313efbde52229f4b8df5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nova-spectron-impulse-writable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8476b6ac2431658758159daf4a5664be2e497b0c866561f3d28143c03d717c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ceres-configstore-jwt-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49b37125288f59175aae4e6dc61e0ccea7b4160d5711e3420d95b347159ba37f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuxtjs-aurora-bellatrix-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4094ec9940902eb2dd3dd6b6b2332f3acd59cb9f6135a3fd2616bee12fb70677 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electron-builder-ganymede-tethys-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6980f4f142809989641586af71b87ec16b320ce93c4364d719427303535474e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fornax-mysql-bellatrix-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22bad8ead92b1bfb381b56cccc2105b1947b8cd2bdc46a1e6b12690cf923b0bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120695

Malicious code in vulcan-fork-colors-neptune npm...

Malicious code in nuxtjs-colors-update-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 847798a82aa947d6f56ab6201b37c9bb6fd5b2e9a8f27f39d89c287bb9059747 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...