MAL-2025-142630 Malicious code in fornax-link-framework-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad198d91229350f652e4ae102f70d8e7ce49ce27bdf04e26787e9a03c241f11d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146348 Malicious code in polaris-inquirer-playwright-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb113a79c674390ea13bdbb2daffec02ee11e4da8fb01b2cd1799b1b2c8d4d94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149753 Malicious code in xo-rehype-phoebe-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95f8ff4407903bc32c0dcdb711304ff649dd3492040e25b4f66f198e6940d911 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146923 Malicious code in quark-csv-draco-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9080c335f4716783b757edb5e4194b3a55d2cc2f22771bd3c9e86bb62589188 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139795 Malicious code in await-css-loader-neptune-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 471b5799bdc0500202c4414d25c7709bc32363daf02d464476cc8a8bb3518ba3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147389 Malicious code in restart-procyon-apollo-playwright (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f42e3571477042a427ea800803cc8cce7743f22a2f72d8c43432ac8fd4a5c96c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145144 Malicious code in mongodb-yildun-event-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 415b4bae99cc9b1568c32a6c2a8aa3eff44332f1ed641713a550cfb1969e937e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147552 Malicious code in run-script-testcafe-astro-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7916e8a378d8990513632bf657bae538eb3be1e67bd7c5848e1e1e906953cb7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146847 Malicious code in pulsar-xml-nextjs-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f0199654cd2a544402f7fa4493d46c06e17e6e76ea2056d0a17ae90f068059f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140718 Malicious code in charon-commitlint-config-angular-mdx-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f728589dafa96fc22b16495fcaa1e4b6f0d89a044722caad1f849aecfdf5dcab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149797 Malicious code in yaml-nightmare-command-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22757024aa3a3d10664748a50311b9182e726fc4abcde0b54f43b750cb3c57c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nashira-kaus-xanadu-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d43d7c01125c927a86df8b645d2887c70f72bf5c3651162f0d10a47915acbbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in winston-magellan-miranda-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71ee01189845db7aa342e79e837373263b111cf89d61884466e815592205e5d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in halley-sync-colors-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a315129aea4bbc0df37718edecba7ea88cb3534b2df5ef52e798db334c6e3d04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-postcss-loader-thuban-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01f8b923d176dbf13f318330091afc5a22441ff682eae8e7d2c7fc2859adbf1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thuban-css-minimizer-webpack-plugin-parcel-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba20e4a94027f3181217bb6bdd701c4838a02c50cd8a2bd55e6fdbc9ae2f0a46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in protractor-zenobia-npm-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34fffd5854a17d7b9cefd4422eff7eba11b7fb2eeac2286356ad038845500e84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quantum-configstore-mensa-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3620184656a6dd55b2aace0ebf241f117584297c3f05dddbad3fa1bba28d33fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gatsby-commitizen-centauri-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d23dc81767771f097119dec1907f0870dd56482d849c952663140da2b6f431dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in winston-neptune-standard-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6100c7d0ff6d29306a6d718fbbbdcad4feab4d3512e557e86af8454531cfdf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...