MAL-2025-146457 Malicious code in prettier-blaze-fusion-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfdcbf834fd5bd130e4eaf0bb91fab61f3b682624b752653a4f5ec1cca458e06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144055 Malicious code in jupiter-frontend-io-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34176c946bef9512eef39a6bf7c7ddc4aeecbe799512a162fa76578058365c4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loglevel-rate-limiter-markdown-pdf-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3df9ea4b32d4c9b2d2ce285363f2b37f3939d71151d71bbfea24e5c4bfac821b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cz-conventional-changelog-transform-kinetic-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ac90554ba04c26db8c766211102ee31b9b49ce27e14ea6f2e29a5a1bb870369 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meissa-slides-event-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0ea016128f3a3773671f5032bda5869a87bfa65d6609d9ef5f19160d22298b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auriga-umbra-webdriver-manager-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50ae286dcec88ddb773dc3009ad79010cb25780803bc6a76fa3bf2d1b52c5ab1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eleventy-nightwatch-tailwindcss-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0154347a1de85eb8f3cfcc2d53c17da34e78c91e8d4ac0c14e7bace97e22ca9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in publish-ganymede-cosmiconfig-xerxes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8346c1476dda7d46c13bc79d119a9eb3a5dcecbdfabfa1d013f4c6ca36e55b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pm2-xerxes-luna-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5728f29060650121e6a105763cb85fb35cb529f487913d7a652cc79c9e0087b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eleventy-hyperion-nova-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67a26aa108c03ab09f42e137ce63034d09c9d1028ffd7e9bc25d0d6bf4adad17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144649 Malicious code in magellan-middleware-protractor-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 930bcf903d4874e22b6b79a00b1cc2c3a1fbb30b21d8d457777e38c1fb17f539 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148660 Malicious code in thuban-parcel-fornax-nightmare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61a2162f7ddcda39a5718acfc616b26db22ce8a0e0da7efc71531e95185cefd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142258 Malicious code in europa-centauri-xml-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d7674a66007295cad514c052d1bb8d6b395b7645f95566467054a8c0b142e75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148639 Malicious code in thuban-acamar-geckodriver-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2efe942c0be1e5d266bb42a397eec4438ab5d17f13940591bdfcc69cc152a4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148280 Malicious code in start-run-script-sagitta-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe781b616783272336fc83c52ff140f961736366976234f8bf7a06d0ac590387 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144622 Malicious code in magellan-astro-taurus-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cf0ce6cfcc1944002839109c84e81c317bf8ee3ead756f370ece942286982dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149614 Malicious code in xanadu-virgo-meteor-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c761f603fa14ef1f4f2c2a192cb03b28359feca4a70d4e702e1fadd8d0c5e5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146678 Malicious code in protractor-aldebaran-native-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ec0d5cc0e40ec412b1d438650ad8c4376000d846c37ff0e84f10ed2b00b6ea2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142920 Malicious code in gemini-wolf-subscription-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aac34b37db8f5230563ed1d7c9aca5ba4992c6274148ebc27c70174dcc389fa2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141951 Malicious code in elektra-ophiuchus-hermes-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 773d7cec7eba42a15eb28c5ff40c529ab002c4ab4f2a7b1085adc30aabf1a1b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...