MAL-2025-141690 Malicious code in dorado-jsonp-alphard-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5d986aac1302f1d13be93e50f6e9f51836d226d7e9f291313b280eaec194504 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149629 Malicious code in xanthus-koa-cross-env-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 873d88c3509404f2988cf91d1771157fbd0b4779809b331cd37a8c05f53e5239 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146890 Malicious code in pyxis-terser-dactyl-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 881621ec4d7106ed416450651d6195f7979fb834bddef57c7ba0760f7650fed3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144852 Malicious code in mensa-frontend-sedna-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53665ead08c8ec17b51688daeced105daa9d1ac3f82de921c27b8b3a6d165b52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145327 Malicious code in nconf-quantum-style-loader-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 179bc24cc0846febdd1660ef9caea52e3cd7cc38814851bd94acfd20e3ed0568 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139748 Malicious code in auth0-gacrux-gatsby-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bf6f8d747897cf96e7085bd279d14256a71b19de5530cb312399c232e7e9495 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145066 Malicious code in mocha-aldebaran-sass-loader-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e4e7e98e5605c713059061d8faf2bbea600f5c269f0c61c5dbfd5a723d4c601 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148764 Malicious code in transform-helios-jekyll-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc021b0668f909b84b57151c40a8fc0e71fcdfb248bc540f7fffd18a761d5f27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143726 Malicious code in iota-gulp-colors-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8431bf4a128360ee6043e7c52edf66bbce754f42425ffbe398556515f7563293 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146324 Malicious code in polaris-aurora-mensa-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 314a9b30e500b1aa27850cd7078ace3a9ca58b62ef8ef1925f4b3e585475f6be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141459 Malicious code in dagda-algol-cli-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4ba74dd1ed1fa86b1e45b96f7225f5be8ef4b2a24606e0c856dada5cd3926b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144077 Malicious code in jwt-json-commitlint-config-angular-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f8cf9b1c13396fdcaed50f6accfb81507a6b264062567666b0286ca187fbe57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146243 Malicious code in pino-pretty-rate-limiter-xerxes-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0abf532044d3c7fd705ec111e6e3edbb278aef7902b90066d9d00267bcb31a53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143907 Malicious code in jekyll-javascript-draco-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d6d1b5e23f5b42bd7a38be0d7cee36fdd4171be8cdb7f30aaa02cf2da7e5680 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143600 Malicious code in ini-puppeteer-sirius-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f165079f96f534969d007a41855a4d7f2ed41baf135f410520c0d13780012190 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147090 Malicious code in readable-pulsar-umbra-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6a37db6acf1eeb86d61cb6ee3336ecdd064509d9376e2b98857ad59d03c55d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147149 Malicious code in regulus-local-eslint-config-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05b8a0e9039e0451fe1b3b0c8b6f33d25e4987340fefcd91e843027f99b848fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139819 Malicious code in axios-blaze-electron-builder-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 435766bba1d220eea1948c3caaa83c02a3226900dd278834f7fce9a081c91a4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143262 Malicious code in helmet-rollup-plugin-odin-pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ade99d3c6dd767d9868deee7677ac1d018c9778d0879c216ea18dad827f75768 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145542 Malicious code in node-sass-google-node-sass-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 916a91c4d8ed0d001a8049bf53130bc5cee5f30c571b7bbcebcb9ee50036dabd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...