MAL-2025-140564 Malicious code in ceres-eridanus-eslint-config-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de73cf1a1d051ede7b2b4b1f0b8b40817f132d64f0922bae18b2a83eed940264 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145073 Malicious code in mocha-dotenv-node-sass-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14c4afa4aab8d95b10788ced224c58c848a4c18a6731fef0fa3aa671ea3161ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140945 Malicious code in commitizen-terser-hugo-markdown-pdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a2b8214a60a662a80a0f0137d8ca285913123c2808845be9f6d435e37b6af45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143921 Malicious code in jest-electron-leda-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4afc2c02941b782a02116d029cc9e08d731431e5460f9652b303b188bbed9458 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139684 Malicious code in auriga-nightwatch-yakutsk-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a35fa65ea2bd4d530b030637bffe1acb3dca16c267a6fd9f1f510158073ab3fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gulp-blitz-radiant-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2272dce106a80652d7130e9f69d1980ddc9bc530edc7cba63e8fee9d913ef8b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in writable-mui-iota-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c68e01de43ec016ed5269f79e51129c4519b0191192620c44b484a9d5b3d318a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147358 Malicious code in rest-nextjs-pegasus-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2395e16f16fd91bb12bb0f7ecc86de9d718432c37009b24b2167bd90ad6e98e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144907 Malicious code in meteor-despina-octans-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae65bf00ffa8318ec13c12d88ff9a10b09717907e583c9ad2ba69fee6708f1a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blitz-prettier-stylelint-yildun-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30c3352d640999ac0d955a05f22a310ef41dde7cc06ef30b7fd682db91c38cb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146143 Malicious code in phoebe-celeste-luna-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ffe0d0c724c25ca5f6c7bd0c954b2482889ae6065c56568136b475e39442706 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147573 Malicious code in sadr-private-cache-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 725582fbd138d40610a8d39222319553a140c5435ccd2e0700e92ed0ba29ef7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146723 Malicious code in proxima-mdx-hugo-draco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f61776310ad21e449a4587721604572505e76234f8384ee96d1dcd2ce81c2a86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147864 Malicious code in sequelize-deimos-cressida-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e70ccd0b2b0e6bba0ae898039b44edfaf5267da39d9d94a84e53158d0f6ba68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148468 Malicious code in taurus-exec-javascript-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdedd5376e6fe1861b11be01534bfda0c690e573d66adc4218268940bdf545eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148530 Malicious code in terser-meteor-element-ui-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f41505bb8f06c3abba6713e2918cde0849952204503e238e0d3620e4f58c5a6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139279 Malicious code in aldebaran-grunt-cross-env-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 942dc7567872d64db37f4d53372787e9b8e5a11a4ea0f476f650bc9815625904 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143958 Malicious code in jovian-proxima-dotenv-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6733db5f8deed25a8509ca2236434c17eb704c35183af720bcaca605fcabeb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144309 Malicious code in less-cross-env-enif-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f51f4bd1b642b2fde0f784e6728bc41be9488dea6352aa752a2e1ccd2f2f7e76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147445 Malicious code in rimraf-canopus-promise-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff23d07545c6bf65617bc3e8cda0cc53db851598795f0b98762db3ff60fef82e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...