MAL-2025-143336 Malicious code in hexo-apollo-janus-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c05007f5fa2858df75a8256dd3fad6c0555590c1cb53011e0ce7dacbc72478c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148760 Malicious code in transform-cz-conventional-changelog-electron-builder-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8a8a2acd4f5979240d2cb94b41ff2e23f5724b9ccf8109a4e25260841a8fbf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139862 Malicious code in babel-inquirer-luna-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e38df1c945aa945c9dd792f46532d5559c541240ced77f7885300dabc208c963 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147540 Malicious code in run-script-changelog-publish-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90543340762c3dc3a715829b13e8c3f5016889801d840eba6365aa107803080b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142766 Malicious code in gacrux-ganymede-fomalhaut-lint-staged (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a1a8e305affdf35bf9259a55af9f339036df0c226f0a7e230b625d81909cf72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139940 Malicious code in bellatrix-jsonp-octans-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f9cd63d924544f73e5e2bbc1774277ccf7945d6e8a5f3117ce855a7d85bebbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142266 Malicious code in europa-enif-frontend-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5d1cbb11bd1538059fd754625642c6b3a833aad1d0337b86d54315327f193a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144717 Malicious code in markdown-warp-gridsome-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d91a7f62068f0a585e503506bf772da51aee6b14209f21c8d75739764856b854 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148557 Malicious code in terser-webpack-plugin-mutation-mutation-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 093f6cd3625f88f87ec25dec35d3e27866fde2e123a38d30403db5f1abcf7846 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140326 Malicious code in callisto-cli-galaxy-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bf556bcb08436ef6833d0ed35cb9b7b1780cbd5bea5d5949a951f74bd975cfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145224 Malicious code in mutation-ganymede-proxima-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3528842534dd10aa2d17333987b5c806f6eb520cfd49588cb9f587b849f61014 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145229 Malicious code in mutation-puppeteer-dactyl-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5573cde9eb7f58c50db9c8a3d2f003010d9e86a0331f9e8cc3f75dd851d1b6d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147438 Malicious code in rigel-polaris-semantic-ui-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f909b3a7f01141b9fbacc667aaf91d800373fbdfde86330fea106757063bae4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145658 Malicious code in nova-farout-test-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 521e78db8a996fd04f18ae7742a48645081c3a357c1bca73cb3ef312bd9c87c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148859 Malicious code in typeorm-toml-mocha-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2cb6c01a744d2a87102e2f7a4c1544a42bf5ce2168f0ef424b8ef24f9adddda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142097 Malicious code in epimetheus-library-framework-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8685869bd43d0c7731b440d9340f7d9cbbb1f65bd22794c61ba2fea0e098a68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146475 Malicious code in prettier-plugin-markdown-async-taurus-xenon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d625e1e6d14f36eb8303b64de0589d97be599d9b9217d167f908927d88dc6476 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139399 Malicious code in antares-config-mutation-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd8607db0f5cf2f8df42373224d4090df0a43cab1471cdd21e6c2bdd337fe782 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142206 Malicious code in eslint-config-prettier-plugin-markdown-zephyr-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81b3ef52b43da2fe6d4c198943373ceb6eaaa3a2711589e609220e6dcda6cf2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146401 Malicious code in postcss-loader-mutation-command-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb9a3c6adcf58d65fce9eab22e16677edddfe56f8801398ceceaf8095c67cb4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...