MAL-2025-144710 Malicious code in markdown-pdf-wasat-luna-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fecd59731081ac14a1d7e6bf85ea26c4a0b8aca42f3e976b461463c99dc87512 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140797 Malicious code in cli-ganymede-markdownlint-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f45a229869b86e2b0dfaa4ec720323de49cc23649bd8f85575228616c9843dcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141495 Malicious code in deimos-gulp-convict-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b82800254ff99ec92da273a62b425cf6c2d0e2c9bc1c238bb30e856e0ce4c9ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142507 Malicious code in firebase-playwright-comet-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d883cae754a7de5adaf031e19a74cb9d8c2fa836bb6d9a02a43474cdfb3dcaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144596 Malicious code in lynx-node-sass-hermes-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5b4cb8743405da734d4d184d2310cc39dc588330460456eb82aad066ff03c95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142754 Malicious code in gacrux-capella-nconf-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5dee520074e43f20c631e67eb9acfd0c743d02d0f0683e038630ae40bdb9b6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141802 Malicious code in duplex-andromeda-xanthus-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2a4bd8d58e794be3d15039990dda69c9d3e45aa26ebd1e2ba5afeffaa379e2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144876 Malicious code in metalsmith-elektra-fetch-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70ad4825d26657e1d808e320ba35d6115608876599dc6bf3bba69bae9ba3c742 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143850 Malicious code in jasmine-draco-winston-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8ff5a0f28a6222a7d93aa808e220ba1825c5aa59001690edf3821026626b821 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139842 Malicious code in axios-virgo-registry-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f15200d0c006ec0dca8523bfb533339e3be63eff22858e13a97047e073a292e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143023 Malicious code in gravity-dotenv-safe-quark-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b46743d185d3cb8c0ab240e5bd2abf54d2e9eed58e86663014e8e9ec32d58bf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146095 Malicious code in perseus-loop-equinox-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c15455fc23e56cc25186b74d796a66dc7b8c99617e33a2e861abadcb052f49a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139564 Malicious code in arcturus-ariel-install-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a80cf0a64a22f38a82d52ff34e6e0d8162043c7109b0ced96ece487449a15f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149855 Malicious code in zenith-mutation-enif-pyxis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 212e28b1fde526e80106961c1bd090110c3ea00225817c67a83323d30157c811 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145598 Malicious code in nodemon-thuban-child-process-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea3f1b19c53e089c5c8f230f49854000efa6afdd1b8db9e5f890dca0b7f5e9ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145177 Malicious code in morgan-hyperion-hyperion-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2420ac58717c6d74276adbead23ce93969bbfeadd6e97f0845fe3f0c1fab2948 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145261 Malicious code in mysql-pm2-ceres-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cf871a4877a3996129929de380f4c025915ab6280a12ca4aa41a9543b269d6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148478 Malicious code in taurus-release-it-sadr-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4ff411da84f3751381a5af5ff44c207ce3708e666554d56c0838d8ba1d25764 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139837 Malicious code in axios-protractor-loglevel-warp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52d16a7033d42bdb4fbfafe22f856e5fb27e0364dea6cc4a01772b651a18961d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144465 Malicious code in lint-staged-sirius-xo-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e17f64d7f2c40a23b7372bb25ea8330f1abf134122c1dbca12aa0be572e7394 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...