MAL-2025-146478 Malicious code in prettier-plugin-markdown-browserify-link-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da1a8c727ac3b13bfebcaf88f918fb328f6db6db6c868976d5d5db78df819ad9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146104 Malicious code in perseus-postcss-loader-janus-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9717f2f2ac452204d81ca2f4247e7b08e40a0486176508635e3a9a8711d883ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141861 Malicious code in eclipse-zephyr-meteor-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d25f08d85561a4f9320ecd3fcb6e97c39ffd13e80b8acf7711b6112b0a8eabab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140622 Malicious code in chakra-ui-nodemon-gridsome-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 126ff566ea2abc806da64457f68e93782465c69d4c39c8050633cf66e6ff174f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146303 Malicious code in pm2-loopback-update-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b312fa8a771ce19d92893bc98acffe14f93448254dd749b876ff74d95551eae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148845 Malicious code in typeorm-fornax-centaurus-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f30755572e37c868fe80982adf7e0e1b3a3c84d267e86cf691003fcaaba7c0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148210 Malicious code in spinner-spectron-auriga-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b9578d72dff0c43f30d887dbf39787ae56004d55f4d197d5557d68d9385666f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141623 Malicious code in development-kastra-lint-staged-jsonp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14251e09c02fef4bacf19a323b84b837d727b1fca4158504f2134a130218bb94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143488 Malicious code in hyperion-mocha-start-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a8b887874b9898ac0f6e0f183bc4dee8c0d7a569bb6ad9dd7ef8d6ebeefbed9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140397 Malicious code in capella-sails-barnard-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76e1d2cd92ef953315bbcbe9321c6e119ba90c15d656d1d9ba2daa51b3f89d48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144582 Malicious code in luna-sass-loader-centaurus-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2278034b7ff68a8192cf1094d25a5a2c99ad341cce263a582564d4c2ef488cfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141393 Malicious code in cypress-blitz-typeorm-xenon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7fd9a3511b91a8ee654005a6e729410f36be69ce140d11fcd0dc6ebdc400290 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145304 Malicious code in nconf-babel-leda-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fd58af62c423f22dc1dd348dd58260892dca5d44f791cf0bdced57cc4e3d30c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143334 Malicious code in hermes-xml-auth0-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 939c611aff8a4e335a1a4820c2a72eac66c8e27637a83e7aa8e9fa29618dfaf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140869 Malicious code in comet-callback-eridanus-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27b1c7def9475e1e33a54a044eaae4b46a02eb381b65fd15acf6fffb661227f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140037 Malicious code in blitz-celeste-slidev-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a42c639afb347d7ed48126244240c893feaf0e464a8b9357fc1bd5d35cf6d601 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140602 Malicious code in chai-procyon-postcss-loader-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbb383055d39ccf72e511de623d5b1555ea9a47f86d90567d3f808175b6d3ed7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147493 Malicious code in rollup-buffer-superagent-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c94961fce5ea04ac8cfdfb74d49339851ca055ba99c0a733abafa399d2879bf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143698 Malicious code in io-geckodriver-local-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12e80c4adbcc2eab527bd2f47a79d7259ddfcfda4646d1a6190d4ce259b39a97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148286 Malicious code in stop-aquarius-barnard-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c424cf28debce1410577b469e5847a0ac3aa9b77d2504b807a03608e3d501ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...