MAL-2025-140574 Malicious code in ceres-react-bootstrap-gatsby-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf3b4e726dde90fa56bb930d14a2e37b38d2948bf534b5ec6b166ca2e2d78a12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147248 Malicious code in remark-janus-socketio-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da9e00c3b387e0d4c24f5c5bbfa1bb719d4839b704ca295d7767ad124b27dd0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146895 Malicious code in quantum-avior-chalk-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0f584f924e5c41aa42e62acfca99d304acbddc6aa037c0b9c9d47e19e28012d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146439 Malicious code in postgres-meissa-install-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e78e694afa9ed340f715efa6d82a75a2aafd8cd410e334c6974fb4f9d2fb94c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143122 Malicious code in gulp-quark-neptune-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c811550bc2be66da51f40555935159a4e2d2f3d2d3de74ee4df0bbed13cd079 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141696 Malicious code in dorado-protractor-ariel-farout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b13fd03154d71a25bfffd817c62d2ed9b024434ce213d48112596407a8e63926 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148583 Malicious code in test-sirius-gatsby-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aeaf14e6e10cbe5a3b607dee0e7b57551519225a5dc3ef21ead34231d78cbdd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141023 Malicious code in config-galaxy-rimraf-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6a20b2aacf8190012ddfbab3217df1639b5da0ac41f048534553bde75653cda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145835 Malicious code in ophiuchus-phenomic-alphard-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58fa29011d4a3463e0941cacae1e2932e8633bdfa6a02fee6fceef04cf7cdca9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147419 Malicious code in reveal-md-oauth-jsonp-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 942efe758bf59cfbd35ecde32f1b9cba47a8915da2bea6632870da311e5ee031 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148640 Malicious code in thuban-apollo-sirius-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69ffb6700a7e0fd845e376455a5280e4d7c5ead3a5c6ae9020842cfc8f38ab6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142306 Malicious code in event-backend-bellatrix-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb5595b1d4ec3c6ec493010da0a65ce1110cccaa8064745ea9cb362a6791bd2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147803 Malicious code in selenium-hapi-graphql-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbe863da11e1bb254e980e820a2b5e550876aaec7d97240823645a418679a9cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142647 Malicious code in fornax-pulsar-phenomic-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5bd18961a6749b1c841892122d0994deda449769618a1ce0ba23e402e00ed23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140661 Malicious code in chalk-xanthus-repository-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e114af5f4c3f34ce30645b799ef566a3aed7d0a103b438d1a2fc83cca45530d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141233 Malicious code in cressida-gatsby-sirius-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7b83efbcd56bb732cfdce5581fabde7d9d497bed014322bbefdcb77db4b1d29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145121 Malicious code in mongodb-cosmiconfig-impulse-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16aedde5124299a67704ac06f0b0969657a4ac78522a0130621fa3344d627407 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148682 Malicious code in titan-less-loader-mongoose-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f435d0c6225ef989e040df7f6dc37a6312c0b5c425590180a80e65fa144b165d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140652 Malicious code in chalk-passport-xo-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c244aa0a095f7a8205087c80d788004f74f73da527c4e42c8759dda5f0d3a93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143269 Malicious code in hercules-andromeda-cors-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c0a65517828c759ef112b5679684b76174ea657c94c4adf54cc86b95edbff45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...