MAL-2025-144279 Malicious code in leda-metalsmith-cassini-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebb8c8766f8543981afe7cd3ab173f90aefcaa4b6b7fbe5fbff2d7b9838cbc68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143379 Malicious code in html-webpack-plugin-zenobia-terser-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca51464dd3dc05ef441fabbd75b7b9aa7b4e463d2f9acd39a1e2772ea9bb8995 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144642 Malicious code in magellan-jupiter-jupiter-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5465d37e629fd147f904430a0ecbe14bd1ac0e835f9c833515fdc170327c89fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145629 Malicious code in non-blocking-ursa-postgres-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4a3fdd105ee5de4d8319f3c1fc42c4e5a68d5c3842e883524063669fbdc8004 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139765 Malicious code in avior-dependencies-radiant-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a39db691166389af7eb41e33b34e652b4a60d102ea2c9b17977299e7f021f730 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143417 Malicious code in husky-fork-child-process-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c28ab319aa31277e720caa8ff1e8f5df6fae0d7de9751935ac84c658e0c026b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140102 Malicious code in bootstrap-event-figures-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd440be5c2398a1ffe5fc7cb8bf04029cde060eb05763d8cad3f255deb78d732 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140268 Malicious code in cache-chariklo-gatsby-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 922d2552b4fc45a9980f353493ad012a5579a62b6fea2ec12c4de27f6169c5ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147854 Malicious code in semantic-ui-perseus-firebase-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 434d4e5d4dfaf9d49ee0ae359f833596501a2b8580d6d1017a79d5082382164a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140836 Malicious code in cluster-sync-development-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24ded04885cce013370c43c85d9b42e94e798f39aab69a13d49118a8fb5df4d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144681 Malicious code in markdown-bunyan-sass-loader-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e75ba6abae34bf7fff5d43af7c07946d458f794e386d3f8dccc26010f8bfd47a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140517 Malicious code in celeste-optimize-css-assets-webpack-plugin-bulma-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d248cf7f501c1463ad28cd977a126d93aa084780b79e789cd9a7e12c51f38449 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148200 Malicious code in spinner-jabbah-dotenv-safe-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 748d8a3cff783e8ce4ca144f5365873cb4fe15073ac53fe9fa26f546b053cd6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145071 Malicious code in mocha-commitlint-enif-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f7e9e5034c33ac7fdb51b5ba408e5fca69992dde96949b71cc5cae885249096 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144854 Malicious code in mensa-halley-bootstrap-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea1a18f9f0dce5f00570338378868ef126968870597e34b985e1d8bcc4b1bab8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143560 Malicious code in indus-callback-achernar-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09f563839092782ff7a791175f637db961273e9a255a2fe0cfbb22651e32cb1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143766 Malicious code in izar-transport-transport-xerxes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 618328e12b0ff637ceb1688683a924234b65fbda44e8fcb3c6a3ad3647166f7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145692 Malicious code in npm-taurus-canopus-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d949045a10ffe384f75bc810051fefaa0c8329ba416cf7347aba64b4906bc88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144300 Malicious code in leda-vega-forever-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 705ba1bffe46a977d02c92d5251392b47fa800e7294432d8f3f44f3f5c584c8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139409 Malicious code in antares-forever-eleventy-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1176b13fe05a33c670c5065abbc172457e68eabe3127f0c4345eb74dfe4db208 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...