MAL-2025-139715 Malicious code in auth-atlas-oauth-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cff2e1a60b148d3151b2476f58874193bbcecd8ddd2bfee1f592bde3031ced7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142088 Malicious code in envconfig-wasat-bootstrap-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af6db8e4f65d41c200bf215e85d07bcac6f0968a2f588d5aa3bf006697614914 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144355 Malicious code in levels-levels-ora-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4502d31e1f09441ce3987a7b5f54e91d5b3b26deb2544d135b60d2e3face816f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141325 Malicious code in css-minimizer-webpack-plugin-eleventy-writable-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16c809fff64854b81d5e2dd566778b8b3f0b3593ce2d0a3267e2f2772472b028 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139379 Malicious code in andromeda-module-xanthus-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36c8b6df485741e609f00a40fecab5f5f73c08f74cb8b2e4e20b97b222cce80a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141346 Malicious code in csv-luna-loglevel-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39de5868daf7a7800d0aa668da6d9fb3265e2f881ca7e315c902452e2cea6df7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143168 Malicious code in halley-spectron-rimraf-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e73c947e71aa2563113e69cae4a5ed27b095147d625872993d40c732a020be3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147728 Malicious code in scripts-concurrently-grunt-yildun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90713be5a6b07f12ea3a0a3307259d9d4cca964d591bf7ce254508064f384e6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143838 Malicious code in janus-tethys-meteor-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e86d96e2e240b4767421e42a5e361505dce16c32f6ce2661763218f3c14ba17c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147543 Malicious code in run-script-fornax-buffer-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3752fdd8a7fac85a02d1b9f3d783e990616dac37d1fc6cc93d0d1d4049ef7cd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144842 Malicious code in mensa-apollo-firebase-lint-staged (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3e0231c97d5ad71e53184aa2327549e5ad41ea6fbe8a1fb8617a327ce0f28aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144900 Malicious code in meteor-bootstrap-impulse-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 077869429f1ca60fcc59df622b3ed1c2ae79c5d9f64595ee373a3b164d265393 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140289 Malicious code in cache-xerxes-upgrade-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 802d7a7f0ae8fc2df51dbbcc7b9cdc31fbeb2dd2584a21fc7a4905eec8e8f72c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141928 Malicious code in electron-reveal-md-gravity-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23c378215038e150535e23dd20905375fa9904d58db75526757f188d9fcc94f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143387 Malicious code in hugo-elektra-quantum-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a00342994850ce03c837378e8eda96dd6f80397b14d78a04906aa43710f198b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147623 Malicious code in sagitta-supervisor-publish-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5de9a0ddb3ac825b2c032dd952456a12fa1dd6793f53dcdfedbc6229196f808c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143238 Malicious code in helios-procyon-acamar-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b1c78fe3d841cbc1ffd9d974980201998e5adecf1b4254977630cd35006ef5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144286 Malicious code in leda-prettier-antd-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b43466b1e90ff3b3aed8cbdc1dde1a86542af225d18ee73ea34de99f4f4ec5e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148370 Malicious code in subscription-zephyr-exec-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbac9979b36ef95fcff39ec01aef5c14b6ecd56f1a9563841cc72f03bd25f21c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148384 Malicious code in superagent-kinetic-vega-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f052313de57a449d3ba0452395a8a82d566127cc64dcde2d2840853d301a7270 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...