MAL-2025-149602 Malicious code in xanadu-mongodb-typeorm-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16b3004b09815b865e7aba8cd396701e03e6857c8d9e9380be68a316412b075f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143226 Malicious code in helios-arcturus-rocket-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc6fb61adc850fdd19f68526676fd00186f6fb9efffd1d06c0d66ab15eaadae4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142512 Malicious code in firebase-sagitta-tool-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e9f0e4b922b003c40ad9a7753fe86040398d2220a37c9273a23abf24bcd4318 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148863 Malicious code in typeorm-unuk-dotenv-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0ede693b2a0091c7dc40e54e02994f3841f5d5018a0a26d1ce22f4216b025d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149291 Malicious code in wasat-iota-juno-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e184d050ff2e9e3a46885eb00f8bdafee0f685ddea7afe8c725355e094ca31ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139415 Malicious code in antares-ignite-apollo-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9955c0bdc50f51dbe4056f786cce9f2a0b67b0957ae6479ff9241960d1faba6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144576 Malicious code in luna-pegasus-nconf-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0fa455b2059614d207d686005cf0890c87f2061d148044477b6e8eafff85443 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139872 Malicious code in babel-rehype-mini-css-extract-plugin-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a1fc500675fae07b9a876c104374b27b82820a5d8bcfaad02b275aa0426a718 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147314 Malicious code in request-sync-magellan-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c79f1efc842b2ad8058b2585be7a3aa35dd20a9bd08e234c21471a77b6ad3e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146061 Malicious code in pegasus-upgrade-gravity-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66715409b059a0c688b80772af4ac8b0e473a8d2d8a8d25d96b2b1236cd73425 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148752 Malicious code in tool-sails-nodejs-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd93e3471899ae35d729a7f8c6bdeca06ee3b377bb9447f02dc441b537fe77a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143534 Malicious code in impulse-adonis-lyra-pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7ca4591578541b00ee189827d4e9f0a0dc42ffd41bb91438b48092b3d41e0af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141058 Malicious code in configstore-markdown-convict-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27545746f4c3e9130cde3a5dbb4003c04061195eb37b9546b96683d306d649c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143168 Malicious code in halley-spectron-rimraf-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e73c947e71aa2563113e69cae4a5ed27b095147d625872993d40c732a020be3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141206 Malicious code in cosmos-eslint-transform-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7479fb17e9a5219733e5a679b2a6f500dc2f60d0358935e1b79955c8c2c8c2b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143129 Malicious code in halley-auriga-prettier-plugin-markdown-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 121edc4555579663ed0cdd1b890a4798334cbc15d4f177d9d961e054c2b64395 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139334 Malicious code in alphard-pegasus-server-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dfa461d7d0894f0839cb8ce6a4066ce402a451d1bbad3c07e5b954c8e025915 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147128 Malicious code in registry-fork-terser-webpack-plugin-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e5f80d581068875ac320615ae15a242874ae033d46442d41454a22228f38a50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148105 Malicious code in spawn-registry-hapi-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ce6c4931686578ab6925d8495679d37db70997bb5117ee12b15a35a4b0af5c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146428 Malicious code in postgres-bulma-solis-deneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef2939f5fef03e663ea47af7c668b5c09c22b4c5e2fe26f2ca08c97814bc5ab3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...