MAL-2025-140960 Malicious code in commitlint-config-angular-cressida-nodejs-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51233a99373fbba970ffb051b6d35dfb5c790bf689ce0c29ae1c2bb9f36c160c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144223 Malicious code in kronos-odin-husky-impulse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a22743875e5744cc8a70917be29c9b2a3057d3afec2c9f87c65bd78d07c960d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140337 Malicious code in callisto-jwt-fomalhaut-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1d4edd29a5213c358777f85632ba1fcf13f6e4e6bbdbeed1c260ff2b3425120 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144086 Malicious code in jwt-spectron-global-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd19c70db984d25aa49a8e055559447580b2522c142759cf4f72573777240e58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148431 Malicious code in sync-relay-rocket-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d32acc3ff6150b9249c5bb1726675ee3064871ad7ca596e9e181bc96932d36e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141362 Malicious code in cygnus-atlas-juno-phenomic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c847e0f9815963114519ef959cc97a76ea2888b07251d662b2455677ef620e8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148478 Malicious code in taurus-release-it-sadr-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4ff411da84f3751381a5af5ff44c207ce3708e666554d56c0838d8ba1d25764 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141531 Malicious code in delphinus-transform-event-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0752736ff183a84118d0c03070f6e93fb04f2b02c74e99d9c655488c1f9a590e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141225 Malicious code in cressida-castor-await-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e77705b3475b64f9c2feb49b57d114cb8a2433b79f6491f7a30c291524c61c3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149134 Malicious code in version-firebase-yildun-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 959ec43cd51cc37556f973164ffeb7c974359d75dc1141f1635b2777a1b8a03e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144264 Malicious code in leda-convict-commitizen-cassini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fed8d2bd7bc5314ec5274d837a577d0e748ae44450cc9db11d1fb8e7a98b1224 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144676 Malicious code in magellan-xenon-bootes-xenos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f62df206e0c637e4fdc9672598ac3b8880e4bfc6880a5cbe40eb17ad429a7520 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143206 Malicious code in heka-jsonp-triton-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4442839a576bde6f5711839aebc86fbf239039a98fb50a343307fadc3dcc0e46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149774 Malicious code in yakutsk-luna-sadr-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3996a4bf7897414bbaf10aa9131054dcd59cf851b964ad40cd9224667d292f74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141802 Malicious code in duplex-andromeda-xanthus-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2a4bd8d58e794be3d15039990dda69c9d3e45aa26ebd1e2ba5afeffaa379e2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139260 Malicious code in airbnb-node-sass-leda-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60b532c53d3667571b50126b7f8df59d25d564f7f2f526e3f6f2b6dc5917495a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142212 Malicious code in eslint-config-thuban-repository-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41c074994c161bdf7cb79253e0cc659149af99d893068ef5bab57b54a45a15f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142116 Malicious code in equinox-aether-enceladus-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e72ac2bb7e1588639a15767799edb1be2133b975a202be1a2e499f7f41565d5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141729 Malicious code in dotenv-parse-variables-ora-aquarius-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ff8e83bb1b3ab4c34714f6ba9d7921da13616d537496b69657f53bf7cb62eb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142828 Malicious code in ganymede-winston-enif-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e5f05b3b4884fda91ed4e5b87e250c8d1fd333f9772b5f001db3a8ff25f07b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...