MAL-2025-147783 Malicious code in sedna-pavo-mocha-ora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f613be6a51ea941638b5a12837877d984872eb3b1f8b708a07c955192e00c566 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145275 Malicious code in nashira-flare-rollup-plugin-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 389955c74cc9198f061797975cca0e77d5d47037a30efead28653746348f6c05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147389 Malicious code in restart-procyon-apollo-playwright (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f42e3571477042a427ea800803cc8cce7743f22a2f72d8c43432ac8fd4a5c96c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141464 Malicious code in dagda-castor-xo-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 423da8885f6bb0609f244a9e0ff6b0ccfa187e1af076268693e93b0c2bf6a404 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146845 Malicious code in pulsar-terser-publish-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3720a288da20adf950ef63d4d9940f4c6c2306532eaf5161886362bcc34b0f16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147872 Malicious code in sequelize-janus-phoebe-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2234a1e4e0c12ce58612b779d7c308edb05bfd4aa8f7c2c61c0610d8e3330e62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140909 Malicious code in command-janus-xenos-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef4326baae54946d0c93ca65ecacf8add96cb2a440dbb025b5308740cec8e138 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139747 Malicious code in auth0-forever-postgres-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 269b82056a31b43b01d8c289b59dd98b00ce4269e59a1eb05e83db7933f8f3fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143514 Malicious code in ignite-halley-jovian-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 641352305dc2f90655fc051c707ae15f10e5b860427930d87e2b807717cc2ec7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141705 Malicious code in dotenv-csv-jekyll-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f602ea5a4d3e70788dc52fbd3fcfd4afcd27d68f5d379ce7818d10fa011db3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139471 Malicious code in antd-yaml-rate-limiter-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6412d07eb97a4f89d1264c3ef0f67ce293e3a765abdab4583afe95d08ead7e52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142800 Malicious code in ganymede-got-got-release-it (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 883b4fc41b4c70f7a904bb5efcff4d34e0ea12b981eb6096971d9a6f3b76d4bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149168 Malicious code in virgo-rehype-hermes-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b4c4bf9e0a867f395c0915acb3f132a13d802a1a26646349a3019eb4bfc537d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139795 Malicious code in await-css-loader-neptune-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 471b5799bdc0500202c4414d25c7709bc32363daf02d464476cc8a8bb3518ba3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146906 Malicious code in quantum-karma-eslint-plugin-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e82b35cb990310723ae4204e042fc5cc97154cdd0ecefdab8891a6115856c2d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148903 Malicious code in ultra-perseus-betelgeuse-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 381da3a96c7e7b45a69ec174da49f251e1a0b300209a66f514d143c7960ad8c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144414 Malicious code in link-meissa-colors-nightmare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37d8a7b6e669481fa904e09e533347207b654c2c73dafbc0f436908439741150 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145961 Malicious code in parcel-karma-remark-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b675f3b0e242eb28c37eff42047754b0b896cbd5ec4452299033902d1bc3b9ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146690 Malicious code in protractor-miranda-mensa-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17a8cf61132b136b96bfab4a1fa37e312363717bedabfccced7db087db1b0eb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139592 Malicious code in ariel-octans-csrf-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ad782e8410ebf0acd6ca7e645af374b1c97296fe8279c828a59984a30eb1e2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...