MAL-2025-144551 Malicious code in loopback-gemini-bellatrix-ora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2f1a5292b6c699c7d3f5cade88c583cdde53884e1b7d9834d69df670fe907cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145098 Malicious code in module-axios-quantum-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2f6bd21355a28e1a55a360406e042390d82af333069078c05be4324ebaac7aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143556 Malicious code in indus-astro-materialize-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8474eedfb266d52c3e1dfc1fb588e3b8fd8b8541a1b2a946c7249acdde5c6458 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148725 Malicious code in toml-version-docusaurus-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb161afc3d9dd4d496a79612aec44fc8f74b2108cbd00da73462e7be4619981d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140564 Malicious code in ceres-eridanus-eslint-config-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de73cf1a1d051ede7b2b4b1f0b8b40817f132d64f0922bae18b2a83eed940264 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146703 Malicious code in protractor-xenon-docusaurus-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c18e6ac6c775039d3c19b111ee39a4af9bcc6553cab555cb4dc856a71bf73970 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141344 Malicious code in csv-europa-bellatrix-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af2dc13883e16aec9a6ab1832ce255e0fd16cb43a6a61cec25ce2388c426afcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148396 Malicious code in supervisor-lynx-enif-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7927318322d4ebf3f391128c73ec470be85f97f9dba951ef1ddef5ce9461eda1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143129 Malicious code in halley-auriga-prettier-plugin-markdown-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 121edc4555579663ed0cdd1b890a4798334cbc15d4f177d9d961e054c2b64395 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146347 Malicious code in polaris-inquirer-hexo-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aff789d9b33a4b8d655fffdf0ed25e9131f4504fd6990c2728d6ae90c17491c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145603 Malicious code in non-blocking-auriga-inquirer-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 316359bb885ba6987c0b0f397ef7bf1642c823b88557edd8f9928acd8596cb4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145953 Malicious code in parcel-carpo-cypress-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51611f11cebf50b4cdacfccdd2e1979e08f8252c810d6cd9c4f167da72720ba9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143667 Malicious code in install-aquarius-jasmine-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b21ab829ea85354ff304d31cce53fd77f2a6211441349ac39f4443d4f712a164 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139283 Malicious code in aldebaran-nextjs-ceres-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec61e02727651739214315f5bbf7d1e240a17bf20628ececfcbdab8a6f15e527 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139517 Malicious code in apollo-jasmine-pegasus-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f71845ac8cf484c8fe99a1e0907d4ac0bd2d26a7724145562d9f8007bcf0f8ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146929 Malicious code in quark-mui-adonis-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9dd63bf0f4f6b67fe7138fe02f89ed61db758afc8603d44016f528d34166716 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144679 Malicious code in markdown-apollo-transform-ora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6db4084e821d24264fb92353f0cffb2bb312a7254a0f0a8069c3ffa278f517e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146765 Malicious code in public-passport-event-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43bf8003ea6e13f7738d4e65e37de9cd73ca9fb6ca0cc7bb83f4a2ba932a3f50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141391 Malicious code in cypress-antd-fornax-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c855c95c3a03772d2e386d47b978088412c25d466f3bfca778c008d0a7bf288 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142971 Malicious code in google-testcafe-proxima-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a3e15135c2453afca7d20db14141c951fd9a74b005c6f62e5c5436455ed7d38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...