MAL-2025-141210 Malicious code in cosmos-mutation-eslint-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35ba4c4ab2fc046a741a48a61fd16f22d5f146a6b58e777157f13f0a8aad1a44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140517 Malicious code in celeste-optimize-css-assets-webpack-plugin-bulma-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d248cf7f501c1463ad28cd977a126d93aa084780b79e789cd9a7e12c51f38449 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146035 Malicious code in pegasus-hydra-mdx-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dfb3dfe3a7ba5ef9dbb20510b6926257b01de2cf51e821c2735d90a0138460b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145324 Malicious code in nconf-postcss-loader-gatsby-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a97ab5ec9166bbc220c9771d8d876188feaae7f798661cac66a8179005508ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148276 Malicious code in start-mongoose-scripts-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9c8881d3331a199f19842e80240df5da41adea1181cadde5924c73d69f70e38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143635 Malicious code in init-writable-pino-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f50d36da15c6cb7b0847c738d99b99be6ee6f7075fc0743fe3b6719e1d23e8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140949 Malicious code in commitizen-vuepress-slides-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05d3349dbf2aa8e6026d62f70d94138d5d47c305bdbdb57b61d4923f1ccd53d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146813 Malicious code in publish-shelljs-hexo-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca528f5126e9c24a6c62f286d8690488cb572f3f41632364e361ae06bedbaaa9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139820 Malicious code in axios-canopus-kronos-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48ade41d63c7f9d1622391ff19a184cc9d7b30bf4422aa034da1f374435842c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147462 Malicious code in rocket-astro-cli-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c472ed77c736a9963eff49b3598afb091fc41500d7bc9f3cbff19ef5c0966701 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144300 Malicious code in leda-vega-forever-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 705ba1bffe46a977d02c92d5251392b47fa800e7294432d8f3f44f3f5c584c8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139775 Malicious code in avior-materialize-arcturus-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16a0abe30ecfd362bbf43ba3c31f8f5360240afaf776b1fd268c9fe69ee0e198 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143637 Malicious code in init-yildun-proxima-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8e58e2ececc108f9c03ee9a1ddd205280467095f54af32d75cb204011dcb430 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140944 Malicious code in commitizen-style-loader-ursa-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55d2ebc38705a078126552608b320280b5a60874c5f00b2dc23be6eef2c6a79e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139431 Malicious code in antares-phenomic-process-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a73308f60ba615f3627d57d87db5205c9f4eba95159507cd9f0fe02e687f95a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145940 Malicious code in package-norma-thuban-oberon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87a75ce577389fd332b3db5687497106b3602eb875ddc4098e237e88b7712e99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146998 Malicious code in quito-lynx-astro-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffd46b3c1de7c1784a8817620ce930feb00336a3a0fe9bc8c24e890ad623ba1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141825 Malicious code in dynamo-docusaurus-iota-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 601da33a7c94325665c58104eee0e56a78539f7d9cc24487209dc90c3391df2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144854 Malicious code in mensa-halley-bootstrap-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea1a18f9f0dce5f00570338378868ef126968870597e34b985e1d8bcc4b1bab8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148798 Malicious code in transport-procyon-enceladus-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38408bab8f56069e245b801cd598baa2c571264ba0f39e7e5d01640492a02709 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...