MAL-2025-142208 Malicious code in eslint-config-query-cosmiconfig-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3d4f67a49c2f8660c00eb78d5b0cd0ee38842af3b08524b54732d34fb48df93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139579 Malicious code in ariel-atlas-xenon-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 298a7f623be47cabfd451de0a2eb32a0918b75e3f951f41a55748b9cc25d60b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139841 Malicious code in axios-thuban-eslint-plugin-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34f8a4f3e23670bbf493f18b8c5c2ef9d2b11ab2ab82c4a82ebb877c44b82bf3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145795 Malicious code in odin-hercules-enceladus-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c57d036179b1f1465f13df5e058289fac3398ff3f11cd472e0c1199d10056a99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139409 Malicious code in antares-forever-eleventy-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1176b13fe05a33c670c5065abbc172457e68eabe3127f0c4345eb74dfe4db208 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142490 Malicious code in firebase-cluster-readable-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 820483210b11b74a9cceba2dad0c86cddf03ea9ea44d69ec62bd34b28d73313a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141886 Malicious code in elara-perseus-xo-relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b06bc6e93d26daf13d4509743aa81aedf7d2cc77c9a7522f0242c46ebd25bbde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146170 Malicious code in phoebe-pipe-repository-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5e5e991ebc3e6935e559da0f12e7cd8d6efbb7868d545cd595a7f3e7aee0ddf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139645 Malicious code in atlas-inquirer-jabbah-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f663eb7f0ed0ca0461160ef8e2dc4cfcc7b4290eb39109ff4c70676afa0e3212 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149357 Malicious code in webdriver-mocha-miranda-virgo-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8823687b1a4ad4db6d07e11c07334da46f31bbe82d7d061ccf946caafb16fd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141046 Malicious code in configstore-callback-redis-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc902eedfefad70cb1e53bff07d347343986663b7e4cf05ee0bedb6d0f578343 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145905 Malicious code in orbit-delphinus-convict-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a8c21db0ca3c2e3cdca7740c7b7694a527a0fa3c519ff73b575f380f1740876 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140143 Malicious code in browserify-stop-sagitta-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26fb65db83237cfff58b0e4af1e88a81f87370bff46c3902bb7ae2cd9deb6959 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141072 Malicious code in convict-enceladus-docusaurus-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b32a8b621e280e6ae91766209b9334a5f2c7e13d65c8e87032acf79b65bdbbab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144411 Malicious code in link-jovian-sedna-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4e11422ab4f0bb7873a8e3f4819ba7fd1b7e992231e1068d7521d05a91b9bb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143497 Malicious code in hyperion-rollup-plugin-loop-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71fc72224b44f83c3a8f5dda2c26aa1b2e517794db68c1a486d37563bf0056bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142089 Malicious code in envconfig-writable-spectron-webdriver-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 755591c551de8c2c5232708dbb1a9adef2f6add41727bc872a1cfe2b72206ff7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148163 Malicious code in spica-json-umbra-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e26370197219e71a02c3263fecd9518f07a236ae4b30c53a4642cb3efe432a77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148444 Malicious code in tailwindcss-iota-materialize-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8814d15fdbca9a55d84e73b3267423a3ce4f89f505a49f9cb4f368e08ddcbb0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144565 Malicious code in loopback-socketio-restart-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fc135c39dd60c0e9542761abc5a6c9b077de7f18dccf0e15264129c66ebd396 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...