MAL-2025-149539 Malicious code in wolf-antares-uninstall-impulse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f37908e13e3b9b904f0430d7825adc9afec6ae30f58f69e0aea1614bfaa2d854 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145652 Malicious code in nova-browserify-airbnb-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8b65f255f4a3414fe13133b5affd54ae1c30d0b4c6bdd824edf22015895b69f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143298 Malicious code in hermes-aether-castor-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62aca217b44a643af9a5fa2ca7740f27cafaa83abe59fda3ae8724b08ed39f1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144685 Malicious code in markdown-pdf-backend-colors-nightmare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe31e1cbb1c5fd3376f119da6588501d97b4a992ebe01652d4b12adbb4e28e98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140750 Malicious code in child-process-lint-staged-less-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f62ba95efd3f3ef97d0e9b721dde58dd83c79c4eac6b6f8b08e9fb792462089a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148250 Malicious code in standard-bootstrap-restart-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d44fef6ebb0b24d6d2f1ebf6c0af401ad84e3fad782b5e15cb6dd526dc9cfed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142288 Malicious code in europa-protractor-readable-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fa112931e43f24bbfdf4a2b84e975c5dc4fb7573e88503849b1ec74e6da0a0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139817 Malicious code in await-yildun-canopus-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7b3f8d183c6a4f0b316edb71ecd07c53680a4f679faaaae50a2e104ed9b1332 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147687 Malicious code in schema-andromeda-typeorm-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ab4edc4143c75bde6ff4bb54d9f1c6a52b663c4e007b06ceeeaeaf6278de9a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147829 Malicious code in semantic-release-inquirer-nestjs-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddf324a28088a6961749e1576aaf323a6257739fb24de793a90086859618f517 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146933 Malicious code in quark-pipe-mocha-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00fbf13855675eb0f04555f377cf94b4bcc89c117c1b9e7a004ad4c3159c4c47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142162 Malicious code in eris-barnard-passport-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5193513bff47da06612d54ccf10245ba69adfc4bf3fcf440daa9eff11a361a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144305 Malicious code in less-arcturus-charon-markdown-pdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22b08baccd9d82c30e5e6c477d773783cfbd6d66f0cf6dca7d0451eda1e7cb9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140887 Malicious code in comet-procyon-terser-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11b417566f91d2d0997761d52bf5ca6f8226272728c5e87f708ed8025832c4a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143271 Malicious code in hercules-bellatrix-electron-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07bac72ecf776c1adf3747f46d0a9eec68e308972908ccd0b243c50ae647139a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146801 Malicious code in publish-pipe-antares-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16ece4f36eb0a4c0e49c80f8088a1ec9699232370a88da237cc71dba2575d4a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147745 Malicious code in scripts-quark-antares-nuxtjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf4a6dba39b156ce3c014140ded3e32be802ee8526b3557b23172727a7bac5b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140349 Malicious code in callisto-readable-europa-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9db60a5246fcddf3c7698341dda6b5fef26f7659978b69669b34dd4547503b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140226 Malicious code in bulma-remark-fork-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d37912dda2c1fc048a26c13f8571365845e50058fd84f42956b4a136617b0975 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139890 Malicious code in backend-ini-sedna-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac10ffe129a3acf6c7b2b5dea29ac4add9f9af952e65ab935645e9abded6bfaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...