MAL-2025-146348 Malicious code in polaris-inquirer-playwright-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb113a79c674390ea13bdbb2daffec02ee11e4da8fb01b2cd1799b1b2c8d4d94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144020 Malicious code in juno-callback-pegasus-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38149d9fe8687c7e2c46ea0ee733ed9a8894eb2c8cff4bdec6a64bd7493c91bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149884 Malicious code in zephyr-epimetheus-leda-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b93bd7f26a0d6052f2458fbd2a4d3a22ce879f801883dec1ed4265a6116b6f24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146307 Malicious code in pm2-query-mocha-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e862fed99ae944003c9fc385a730be19c4484e4de753e2d75b84bfec326dc66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146845 Malicious code in pulsar-terser-publish-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3720a288da20adf950ef63d4d9940f4c6c2306532eaf5161886362bcc34b0f16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146236 Malicious code in pino-pretty-hyperion-terser-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df02f906063e61b6da517aab704a23c427a3b32691080d2fd2055d4a068aefe8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144409 Malicious code in link-gravity-css-loader-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a75f70a93f2d197cb9e483e0fb1bcad8f2a0bcddcb8ff63508f3e3bd5dd087ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143737 Malicious code in iota-pegasus-radiant-xenos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2531c5cbdb119ecb6a54a745c27ee948801438590866abeae89bed715462a56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141705 Malicious code in dotenv-csv-jekyll-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f602ea5a4d3e70788dc52fbd3fcfd4afcd27d68f5d379ce7818d10fa011db3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149812 Malicious code in yildun-dynamo-halley-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b626362eeed55bae9bb863aa98c40db9cfbabd1af02b8ffe4a9ffd65fed432a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146748 Malicious code in proxima-vortex-buffer-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52486fb9b8c443812e90f249479354ead4215bfd779e8b4540f4a7ff76bf0e6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144414 Malicious code in link-meissa-colors-nightmare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37d8a7b6e669481fa904e09e533347207b654c2c73dafbc0f436908439741150 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139452 Malicious code in antd-async-sagitta-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9b06b3318adfe4495009692d720576dccbd81fb74b2e9c690133f67d70fa5ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146847 Malicious code in pulsar-xml-nextjs-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f0199654cd2a544402f7fa4493d46c06e17e6e76ea2056d0a17ae90f068059f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148901 Malicious code in ultra-nightwatch-commitizen-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c5ba7ef101351f596629e0364d0b2222171328d574d9ce623ad8780380fb406 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141495 Malicious code in deimos-gulp-convict-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b82800254ff99ec92da273a62b425cf6c2d0e2c9bc1c238bb30e856e0ce4c9ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149040 Malicious code in ursa-apollo-mutation-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13d42fff9341dcdab6e4009ac832a38be16bf5efd69f65c97d53955e9bbcd5ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140730 Malicious code in charon-polaris-socketio-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e765198641ce1b82606fdd938edd1346719d47b28422f609f5126548b170496d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148080 Malicious code in solis-node-config-antares-levels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae2c8da07ae20da8b6e8ebb222294ddec9a48db903489a63c5a274d038252f3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146690 Malicious code in protractor-miranda-mensa-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17a8cf61132b136b96bfab4a1fa37e312363717bedabfccced7db087db1b0eb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...