MAL-2025-147404 Malicious code in reveal-md-celeste-ariel-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c8470d16e3096896180d1fdec498c433326fb2287ef760464e34c1c84caeef7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144495 Malicious code in local-registry-vega-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67d6c344890d104e2d2a94b05422b2650f4a863a1a96482482518e7cd26a644d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140949 Malicious code in commitizen-vuepress-slides-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05d3349dbf2aa8e6026d62f70d94138d5d47c305bdbdb57b61d4923f1ccd53d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141367 Malicious code in cygnus-heka-mensa-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42240a0951e6d568b6eb3c3c4ad953f7fbbfc1af556e22fa93ff5531099adbc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149625 Malicious code in xanthus-halley-gravity-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2029e560f0f7c0132ab1ff4bbde7603b0ac509b73a32937e5180b71d67fd68b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142427 Malicious code in farout-tethys-antares-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa2bbbaa7d4d1ca36c86f88ecf87f827903ba9ed36af18432cf640cd12251a31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143205 Malicious code in heka-express-axios-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d33e9feb5948da23cbdf036738822ea99bdbb64939a1ec88089a7d78643a419d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142653 Malicious code in fornax-selenium-postcss-loader-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b5c5ec2e9a493e1c1dfaca85430575b03a67d2f1baa1266b0db4763fba9eb3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145009 Malicious code in mira-global-docusaurus-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19bfcb6442d80637c44c046ad152f6906b1d7c2c9c003ffe0801fb69f3354a97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148269 Malicious code in start-deneb-gacrux-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6217f63bece54cd97f2cbf64265aa70fc2de9d8e2e0c835429695d2d46ed483 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147379 Malicious code in restart-dotenv-safe-proxima-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67b2a28babdc5c21d99d0090b1f63221b0965d85ddf0be16894320734a6a48ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148129 Malicious code in spectron-webdriver-fusion-nightmare-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96c9538d4a6213051873f06915cef0605cdd04d75b04dc38dabf6aa1c2c51008 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148079 Malicious code in solis-meteor-element-ui-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b07d08f7bd181bf65426ca17d197be99b4431f0b0e6855e93f84eadb534b053 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141888 Malicious code in elara-rocket-pipe-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96ff2f73a968804fa97093b76b356f86a3c51d62f7c7b520c02d5fd837aa8eff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139391 Malicious code in antares-aurora-cassini-pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d0c49d28c416f3eddadd64831714dbc8fe86b0f2e021da175e5139de59fe4e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149480 Malicious code in winston-blaze-convict-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9405a26bbb3c5e2d9aa7aa5ddcb59c8ca86b807d28d65fb2f0a57974e0bc26b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143918 Malicious code in jest-castor-stream-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3868868461930489c674de57569f0da76864293b834ad3f267fc02caa7689083 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142377 Malicious code in express-ganymede-xml-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2364b90c9a1c2e616199f37bdc2457b095add6f68710b005ba6909f082a394e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140555 Malicious code in centaurus-update-xanadu-less (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3c033a41027d427a96352e53d7de60a8b3dc1841af564c6b29083ee2632cf4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146395 Malicious code in postcss-loader-fork-levels-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6eeb87c440bcb3eff380092f73c31bd01232d896ff500023793df85c072d0644 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...